roles/chronicle.limitedViewer

Title: Chronicle API Limited Viewer

Description: Grants readonly access to Chronicle API resources, excluding Rules and Retrohunts.

Stage: GA

Role Type: Predefined

105 Assigned Permissions:

🔍

chronicle.analyticValues.list

chronicle.analytics.list

chronicle.cases.countPriorities

chronicle.conversations.get

chronicle.conversations.list

chronicle.dashboardCharts.get

chronicle.dashboardCharts.list

chronicle.dashboardQueries.execute

chronicle.dashboardQueries.get

chronicle.dashboardQueries.list

chronicle.dashboards.get

chronicle.dashboards.list

chronicle.dashboards.schedule

chronicle.dataAccessScopes.list

chronicle.enrichmentControls.get

chronicle.enrichmentControls.list

chronicle.entities.find

chronicle.entities.findRelatedEntities

chronicle.entities.get

chronicle.entities.queryEntityRiskScoreModifications

chronicle.entities.searchEntities

chronicle.entities.summarize

chronicle.entities.summarizeFromQuery

chronicle.entityRiskScores.queryEntityRiskScores

chronicle.errorNotificationConfigs.get

chronicle.errorNotificationConfigs.list

chronicle.events.batchGet

chronicle.events.findUdmFieldValues

chronicle.events.get

chronicle.events.queryProductSourceStats

chronicle.events.searchRawLogs

chronicle.events.udmSearch

chronicle.events.validateQuery

chronicle.featuredContentNativeDashboards.get

chronicle.featuredContentNativeDashboards.list

chronicle.featuredContentSearchQueries.get

chronicle.featuredContentSearchQueries.list

chronicle.findingsGraphs.exploreNode

chronicle.findingsGraphs.initializeGraph

chronicle.findingsRefinementDeployments.get

chronicle.findingsRefinementDeployments.list

chronicle.findingsRefinements.computeActivity

chronicle.findingsRefinements.computeAllActivities

chronicle.findingsRefinements.get

chronicle.findingsRefinements.list

chronicle.findingsRefinements.test

chronicle.globalDataAccessScopes.permit

chronicle.ingestionLogLabels.get

chronicle.ingestionLogLabels.list

chronicle.ingestionLogNamespaces.get

chronicle.ingestionLogNamespaces.list

chronicle.instances.get

chronicle.iocAssociations.batchGet

chronicle.iocAssociations.fetchRelatedIocAssociations

chronicle.iocAssociations.fetchRelatedThreatCollections

chronicle.iocAssociations.get

chronicle.legacies.legacyBatchGetCases

chronicle.legacies.legacyBatchGetCollections

chronicle.legacies.legacyFetchAlertsView

chronicle.legacies.legacyFetchUdmSearchCsv

chronicle.legacies.legacyFetchUdmSearchView

chronicle.legacies.legacyFindAssetEvents

chronicle.legacies.legacyFindRawLogs

chronicle.legacies.legacyFindUdmEvents

chronicle.legacies.legacyGetAlert

chronicle.legacies.legacySearchArtifactEvents

chronicle.legacies.legacySearchArtifactIoCDetails

chronicle.legacies.legacySearchAssetEvents

chronicle.legacies.legacySearchCustomerStats

chronicle.legacies.legacySearchDomainsRecentlyRegistered

chronicle.legacies.legacySearchDomainsTimingStats

chronicle.legacies.legacySearchEnterpriseWideAlerts

chronicle.legacies.legacySearchEnterpriseWideIoCs

chronicle.legacies.legacySearchFindings

chronicle.legacies.legacySearchIngestionStats

chronicle.legacies.legacySearchIoCInsights

chronicle.legacies.legacySearchRawLogs

chronicle.legacies.legacySearchUserEvents

chronicle.logTypeSchemas.list

chronicle.logs.export

chronicle.logs.get

chronicle.logs.list

chronicle.messages.get

chronicle.messages.list

chronicle.multitenantDirectories.get

chronicle.nativeDashboards.get

chronicle.nativeDashboards.list

chronicle.operations.get

chronicle.operations.list

chronicle.operations.streamSearch

chronicle.operations.wait

chronicle.preferenceSets.get

chronicle.preferenceSets.update

chronicle.searchQueries.create

chronicle.searchQueries.delete

chronicle.searchQueries.get

chronicle.searchQueries.list

chronicle.searchQueries.update

chronicle.threatCollectionFilterSet.get

chronicle.threatCollections.fetchIocMatchMetadata

chronicle.threatCollections.fetchRuleMetadata

chronicle.threatCollections.get

chronicle.threatCollections.list

resourcemanager.projects.get

resourcemanager.projects.list