This topic describes how to add a role and assign permissions to the role.
Although Security Analytics has five pre-configured roles, you can add custom roles. For example, in addition to the pre-configured Analysts role you can add custom roles for AnalystsEurope and AnalystsAsia.
|Administrators||Full system access|
|Operators||Access to configurations but not to data|
|Analysts||Access to data but not to configurations|
|SOC_Managers||Same access as Analysts plus additional permission to handle incidents|
|Malware_Analysts||Access to malware events only|
Depending on the user role, you can set the following access permissions to access the Warehouse Analytics module:
- Define Jobs
- Delete Jobs
- Manage Jobs
- View Jobs
Note: You must enable all of these permissions for a user role to be able to define, delete, manage, and view jobs.
For more information on the list of permissions, see Role Permissions topic in the System Security and User Management Guide.
To add roles and assign permissions on the Roles tab:
In the Security Analytics menu, select Administration > Security.
The Administration Security view is displayed.
Click the Roles tab.
The Roles tab is displayed.
The Add Role dialog is displayed.
In the Role Info section, enter the following information for the role:
- (Optional) Description
- In the Permissions section, select the Reports module that the role will access and select each permission the role will have.
- Repeat step 5 to select all the permissions required for the role.
- Click Save.
You can now assign the new role to users.