You can view role permissions as well as create new roles from your Platform settings. Role permissions are split by product. Your account comes with default roles and permissions, which are listed in this article.
To create and manage custom roles, you need to be at least an IT/Devops Platform role
Name | Permissions |
---|
Viewer Explore and investigate data | - View Explore > Dashboard and Investigation
- View rules Policies > Policy Rules
- View lists in Policies > List Management
- View actions in Settings > Action Settings
|
Admin Full access to all settings and pages | - View Explore > Dashboard and Investigation
- Update an Account status
- View Explore > Business Insights
- View and manage rules Policies > Policy Rules
- View and manage lists in Policies > List Management
- View and manage actions in Settings > Action Settings
- Export data into CSVs
|
Name | Permissions |
---|
Viewer Explore and investigate data | - View Explore > Dashboards, Investigation, andReports
- View Policies > Overview and Policy Settings
- View Settings > Product Settings, Precheck Settings, and Data > Configuration
|
Developer View data and customize integrations | - View Explore > Dashboards, Investigation, and Reports
- View Policies > Overview and Policy Settings
- View Settings > Product Settings, Precheck Settings, and Data > Configuration
- Developer and integration capabilities
|
Analyst Explore, investigate, and manage data | - View and manage Explore > Dashboards, Investigation, and Reports
- Exonerate users
- View and manage Policies > Overview and Policy Settings
- View Settings > Product Settings, Precheck Settings, and Data > Configuration
- Developer and integration capabilities
|
Admin Full access to all settings and pages | - View and manage Explore > Dashboards, Investigation, and Reports
- Exonerate users
- Activate or disable an application
- View and manage Policies > Overview and Policy Settings
- View and manage Settings > Product Settings, Precheck Settings, and Data > Configuration
- Configure and manage data exports
- Developer and integration capabilities
|
Name | Permissions |
---|
Viewer Explore and investigate data | - View scripts, incidents, and actions
- View reports and audits
- View vendors
- View policy rules
- View PCI DSS data
- View system settings
|
Developer View data and customize integrations | - View and manage scripts, incidents, and actions
- View reports and audits
- View and manage vendors
- View integrations
- View notification settings
- View policy rules
- Manage Client-side Defense policy rules
- Manage PCI-DSS policy rules
- View PCI DSS data
- Manage PCI DSS justification
- Manage PCI DSS authorization
- View system settings
|
Admin Full access to all settings and pages | - View and manage scripts, incidents, and actions
- View reports and audits
- View and manage vendors
- View and manage integrations
- View and manage notification settings
- View policy rules
- Manage Client-side Defense policy rules
- Manage PCI-DSS policy rules
- View PCI DSS data
- Manage PCI DSS justification
- Manage PCI DSS authorization
- View and manage system settings
|
Name | Permissions |
---|
Viewer Explore and investigate data | - View Dashboard and Investigation
|
Name | Permissions |
---|
Viewer Explore and investigate data | - View account information in Platform Settings > Account
- View users in Platform Settings > User management
- View roles in Platform Settings > Permissions
- View account usage history in Platform Settings > Usage
- View Enforcer configurations in Platform Settings > Enforcers
|
Application Owner Manage application settings | - View and manage account information in Platform Settings > Account
- View users in Platform Settings > User management
- View roles in Platform Settings > Permissions
- Configure SSO authentication methods in Platform Settings > Authentication
- View account usage history in Platform Settings > Usage
- View and manage page type mappings in Platform Settings > Page Type Mapping
- View Enforcer configurations in Platform Settings > Enforcers
|
IT/Devops Manage integrations | - View account information in Platform Settings > Account
- View and invite users in Platform Settings > User management
- View and manage roles in Platform Settings > Permissions
- Configure SSO authentication methods in Platform Settings > Authentication
- View and manage integrations in Platform Settings > Integrations
- View Enforcer configurations in Platform Settings > Enforcers
|
User manager Manage user roles and access | - View and invite users in Platform Settings > User management
- View and manage roles in Platform Settings > Permissions
|
Admin Full access to all settings and pages | - View and manage account information in Platform Settings > Account
- View and invite users in Platform Settings > User management
- View and manage roles in Platform Settings > Permissions
- Configure SSO authentication methods in Platform Settings > Authentication
- View account usage history in Platform Settings > Usage
- View and manage integrations in Platform Settings > Integrations
- View and manage page type mappings in Platform Settings > Page Type Mapping
- View Enforcer configurations in Platform Settings > Enforcers
|
If the default roles don’t meet your account’s needs, you can create custom roles with the permissions you’d like.
- Navigate to Platform settings > Permissions.
- Select the product you want to create a role for.
- Select + Create role.
- Enter a name for your role and select an existing role to base the permissions off of. Then, click Start.
- Select each permission you’d like to enable or disable for this role.
- Click Save changes.
Your new role will appear under Custom roles. You can always edit or delete a role by hovering over it and selecting the corresponding option
.