Sec/User Mgmt: Step 1. Review the Preconfigured NetWitness Platform Roles

Document created by RSA Information Design and Development on Aug 29, 2018Last modified by RSA Information Design and Development on Sep 12, 2018
Version 3Show Document
  • View in full screen mode
 

To simplify the process of creating roles and assigning permissions, there are preconfigured roles in NetWitness Platform.

                                           
RolePermission
AdministratorsFull system access. The System Administrators persona is granted all permissions by default.
Respond_AdministratorAccess to all Respond permissions. The Respond Administrator persona is focused on system configuration of Respond.
Data_Privacy_OfficersThe Data Privacy Officer (DPO) persona is similar to Administrators with additional focus on configuration options that manage obfuscation and viewing of sensitive data within the system (see the Data Privacy Management Guide). Users with the DPO role can see which meta keys are flagged for obfuscation, and they also see obfuscated meta keys and values created for the flagged meta keys.
SOC_ManagersSame access as Analysts plus additional permission to handle incidents. The SOC Managers persona is identical to Analysts, but with permissions necessary to configure Respond.
OperatorsAccess to configurations but not to meta and session content. The System Operators persona is focused on system configuration, but not investigation, ESA, Alerting, Reporting, and Respond.
Malware_AnalystsAccess to investigations and malware events. The only access granted to the Malware Analysts persona is the Malware Analysis module.
AnalystsAccess to meta and session content but not to configurations. The Security Operation Center (SOC) Analysts persona is centered around investigation, ESA Alerting, Reporting, and Respond, but not system configuration.
UEBA_Analysts

Access to the RSA NetWitness UEBA service in the Investigate > Users view. NetWitness UEBA is an advanced analytics solution for discovering, investigating, and monitoring risky behaviors across all entities in your network environment.

Note: You do not need to set up specific permissions for this role. You only need to assign this role to a user, and that user will have access to NetWitness UEBA.

The administrator can also add custom roles.

You are here
Table of Contents > Manage Users with Roles and Permissions > Step 1. Review the Preconfigured Security Analytics Roles

Attachments

    Outcomes