Roles & Permissions

Access control and team management

SO

Roles & Permissions

Manage access control for your organization.

SOC Analystsystem

Front-line analyst with read access to alerts, cases, and playbooks

alerts.readcases.readplaybooks.readdetections.readconnectors.readaudit.read
SOC Leadsystem

Senior analyst with write access and playbook execution

alerts.readalerts.writecases.readcases.writeplaybooks.readplaybooks.executedetections.readconnectors.readaudit.read
Adminsystem

Full access to all features and settings

alerts.readalerts.writecases.readcases.writeplaybooks.readplaybooks.executedetections.readdetections.writeconnectors.readconnectors.writeadmin.settingsaudit.read
Detection Engineer

Manages detection rules and connector integrations

alerts.readdetections.readdetections.writeconnectors.readconnectors.write