Roles and Permissions

You can create users and then assign a role to it to grant access as per the role you define.

Depending on the roles and permissions assigned, the user can perform actions like creating, editing, or deleting rules and actions.

The Administration module is used to create EDR users and assign roles and permissions. We have provided some pre-created user roles for EDR. Depending on the role, you get the associated set of permissions.

Note: Users created before EDR version 1.1.0 will continue to have the same permissions.

Manager- A user with the Manager role is considered a super-user and has all the available permissions. They have full privileges and access to all modules in the subscription. Only users with the Manager role can create other users and assign roles.

--EDR User: By default, the EDR user role have EDR UI Access permissions only. So, the user can only see the User Activity tab under Responses.

EDR User

--EDR Analyst: By default, the EDR Analyst role has EDR UI Access permissions and Alerting Permissions.

EDR Analyst User

--EDR Incident Responder and EDR Manager: By default, these roles have EDR UI Access permissions, Alerting Permissions, and Response Action Permissions.

Note: The Manager user can customize the permissions for all the EDR role.

The default permissions for EDR Manager role:

EDR Manager User