Roles and Permissions

You can create users and then assign a role to it to grant access as per the role you define.

Depending on the roles and permissions assigned, the user can perform actions like creating, editing, or deleting rules and actions.

The Administration module is used to create EDR users and assign roles and permissions. We have provided some pre-created user roles for EDR. Depending on the role, you get the associated set of permissions.

Note: Users created before EDR version 1.0.1 will continue to have the same permissions.

Manager- A user with the Manager role is considered a super-user and has all the available permissions. They have full privileges and access to all modules in the subscription. Only users with Manager role can create other users and assign roles.

--EDR User: By default, the EDR users have EDR UI permissions only. So, the user can only see the User Activity tab under Responses.

EDR User

--EDR Analyst, EDR Incident Responder, and EDR Manager: By default, these users have EDR UI and Alerting permissions.

Note: The Manager user can customize the permissions for all the EDR users.

The default permissions for EDR Manager:

EDR Manager User