You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/manage/users-roles/roles/role-capabilities.md
+28-24Lines changed: 28 additions & 24 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ title: Role Capabilities
4
4
description: Assign any of these capabilities when you create user roles.
5
5
---
6
6
7
-
Following are the capabilities you can assign when you [create roles](create-manage-roles.md).
7
+
Following are the capabilities you can assign when you [create roles](create-manage-roles.md), including the [APIs](/docs/api/about-apis/) available when you have the role.
8
8
9
9
## Data Management
10
10
@@ -23,14 +23,23 @@ Following are the capabilities you can assign when you [create roles](create-man
23
23
| Manage Apps |Install and manage [apps](/docs/integrations). |`manageApps`|
24
24
| Manage Connections | Manage the [connections](/docs/alerts/webhook-connections/) that allow you to send alerts to other tools. |`manageConnections`|
25
25
| View Connections | View [connections](/docs/alerts/webhook-connections/) on the **Connections** page. |`viewConnections`|
| Manage Scheduled Views | View, create, edit, and delete Scheduled Views. Note that if you grant a role the Manage Scheduled Views capability, users with that role will also have View Scheduled Views capability. |`manageScheduledViews`|
| Manage Views | View, create, edit, and delete Scheduled Views. Note that if you grant a role the Manage Scheduled Views capability, users with that role will also have View Scheduled Views capability. |`manageScheduledViews`|
| Manage Partitions | View, create, edit, and delete partitions. Note that if you grant a role the Manage Partitions capability, users with that role will also have View Partitions and Manage S3 Data Forwarding capabilities. |`managePartitions`|
30
30
| View Account Overview| View the Account Overview page. |`viewAccountOverview`|
| Review Deletion Requests | Provide reviews of deletion requests. | `getDataDeletionRule` |
42
+
-->
34
43
35
44
## Entity Management
36
45
@@ -63,13 +72,10 @@ Following are the capabilities you can assign when you [create roles](create-man
63
72
64
73
## Dashboards
65
74
66
-
<!-- UI capabilities don't match API spec capabilities -->
67
-
68
75
| Capability | Description | API |
69
76
| :-- | :-- | :-- |
70
77
| Share Dashboards with the World |[Share dashboards](/docs/dashboards/share-dashboard-outside-org) in view-only mode with no login required. |`shareDashboardsWithTheWorld`|
71
-
| Share Dashboards with Your Allowlist |[Share dashboards](/docs/dashboards/share-dashboard-new/) in view-only mode; viewers must be on your service allowlist. |`shareDashboardsWithYourAllowlist`|
72
-
| Share Dashboards with Your Whitelist | ? |`shareDashboardWhitelist`|
78
+
| Share Dashboards with the Allowlist |[Share dashboards](/docs/dashboards/share-dashboard-new/) in view-only mode; viewers must be on your service allowlist. |`shareDashboardsWithYourAllowlist` and `shareDashboardWhitelist`|
73
79
74
80
## User Management
75
81
@@ -79,8 +85,6 @@ Following are the capabilities you can assign when you [create roles](create-man
79
85
80
86
## Audit Event Management
81
87
82
-
<!-- UI capabilities don't match API spec capabilities -->
83
-
84
88
| Capability | Description | API |
85
89
| :-- | :-- | :-- |
86
90
| Access Search Audit Events | View and download audit logs of search queries executed in the UI. |`accessSearchAuditEvents`|
@@ -116,22 +120,20 @@ Following are the capabilities you can assign when you [create roles](create-man
@@ -142,24 +144,28 @@ Following are the capabilities you can assign when you [create roles](create-man
142
144
143
145
## Threat Intel
144
146
145
-
<!-- UI capabilities don't match API spec capabilities -->
146
-
147
147
| Capability | Description | API |
148
148
| :-- | :-- | :-- |
149
149
| View Threat Intel Data Store | View the [Threat Intelligence](/docs/security/threat-intelligence/about-threat-intelligence/) tab. |`viewThreatIntelDataStore`|
150
150
| Manage Threat Intel Data Store | Create, edit, and delete threat intel sources. |`manageThreatIntelDataStore`|
151
151
152
+
<!--
152
153
## Macros
153
154
154
-
<!-- UI capabilities don't match API spec capabilities -->
155
-
156
155
| Capability | Description | API |
157
156
| :-- | :-- | :-- |
158
157
| Manage Macros | ? | ? |
158
+
-->
159
159
160
-
## Organizations
160
+
<!--
161
+
## Data Masking
162
+
163
+
| Capability | Description | API |
164
+
| :-- | :-- | :-- |
165
+
| View Unmasked Data | ? | ? |
166
+
-->
161
167
162
-
<!-- UI capabilities don't match API spec capabilities -->
168
+
## Organizations
163
169
164
170
| Capability | Description | API |
165
171
| :-- | :-- | :-- |
@@ -178,8 +184,6 @@ Following are the capabilities you can assign when you [create roles](create-man
178
184
This section is for our Cloud SOAR SaaS version. If you have a legacy Cloud SOAR instance URL matching the pattern `*.soar.sumologic.com`, see [Legacy Cloud SOAR](#legacy-cloud-soar).
179
185
:::
180
186
181
-
### SaaS Cloud SOAR
182
-
183
187
| Capability category | Capability | Description| API |
184
188
| :-- | :-- | :-- |:--|
185
189
|View Cloud SOAR||Show “Cloud SOAR” link in nav.|`viewCloudSoar`|
0 commit comments