Reference: Permissions
  • 10 Feb 2023
  • 1 Minute to read
  • Contributors
  • Dark
    Light

Reference: Permissions

  • Dark
    Light

Article Summary

The following is a list of all permissions that can be applied via User, API Key, or Group.

PermissionDescription
apikey.ctrlCreate, delete and modify API keys.
user.ctrlCreate, delete and change permissions for users.
billing.ctrlChange billing information, subscribe to additional services.
org.getGet information about the organization.
sensor.listList all sensors.
sensor.getGet information about a sensor.
sensor.taskSend commands to a sensor.
sensor.delDelete a sensor and remove its access.
sensor.tagAdd and remove tags.
cloudsensor.delDelete Cloud Sensor configuration.
cloudsensor.getGet Cloud Sensor configuration.
cloudsensor.get.mtdGet Cloud Sensor Metadata configuration.
cloudsensor.setSet Cloud Sensor configuration.
cloudsensor.set.mtdSet Cloud Sensor Metadata configuration.
dr.listList all Detection & Response rules in the 'general' namespace.
dr.setAdd and update Detection & Response rules in the 'general' namespace.
dr.delDelete Detection & Response rules in the 'general' namespace.
dr.list.managedList all Detection & Response rules in the 'managed' namespace.
dr.set.managedAdd and update Detection & Response rules in the 'managed' namespace.
dr.del.managedDelete Detection & Response rules in the 'managed' namespace.
fp.ctrlManage False Positives from detections.
module.updateUpdate and revert sensor version.
ikey.listList all installation keys.
ikey.setCreate and update installation keys.
ikey.delDelete installation keys.
output.listList all data Outputs.
output.setCreate and update Output rules.
output.delDelete Output rules.
audit.getGet audit and error messages.
org.conf.getGet organization configurations.
org.conf.setUpdate organization configurations.
insight.evt.getGet event history from Insight.
insight.det.getGet detection history from Insight.
insight.det.delDelete detections from Insight.
insight.listList the status of Insight.
insight.statGet various statistics from Insight.
incident.getGet incidents data.
incident.setSet the incidents status.
job.getGet jobs data.
job.setModify the jobs status.
replicant.taskIssue requests to Services.
replicant.getGet the list of active Services.
ingestkey.ctrlChange ingestion keys.
payload.ctrlAdd/Remove/Get Payloads.
payload.useDeploy a payload to a sensor.

Was this article helpful?

What's Next