roles/chronicle.limitedViewer
Title: Chronicle API Limited Viewer
Description: Grants readonly access to Chronicle API resources, excluding Rules and Retrohunts.
Stage: GA
102 Assigned Permissions:
- chronicle.analyticValues.list
- chronicle.analytics.list
- chronicle.cases.countPriorities
- chronicle.conversations.get
- chronicle.conversations.list
- chronicle.dashboardCharts.get
- chronicle.dashboardCharts.list
- chronicle.dashboardQueries.execute
- chronicle.dashboardQueries.get
- chronicle.dashboardQueries.list
- chronicle.dashboards.get
- chronicle.dashboards.list
- chronicle.dashboards.schedule
- chronicle.dataAccessScopes.list
- chronicle.entities.find
- chronicle.entities.findRelatedEntities
- chronicle.entities.get
- chronicle.entities.queryEntityRiskScoreModifications
- chronicle.entities.searchEntities
- chronicle.entities.summarize
- chronicle.entities.summarizeFromQuery
- chronicle.entityRiskScores.queryEntityRiskScores
- chronicle.errorNotificationConfigs.get
- chronicle.errorNotificationConfigs.list
- chronicle.events.batchGet
- chronicle.events.findUdmFieldValues
- chronicle.events.get
- chronicle.events.queryProductSourceStats
- chronicle.events.searchRawLogs
- chronicle.events.udmSearch
- chronicle.events.validateQuery
- chronicle.featuredContentNativeDashboards.get
- chronicle.featuredContentNativeDashboards.list
- chronicle.featuredContentSearchQueries.get
- chronicle.featuredContentSearchQueries.list
- chronicle.findingsGraphs.exploreNode
- chronicle.findingsGraphs.initializeGraph
- chronicle.findingsRefinementDeployments.get
- chronicle.findingsRefinementDeployments.list
- chronicle.findingsRefinements.computeActivity
- chronicle.findingsRefinements.computeAllActivities
- chronicle.findingsRefinements.get
- chronicle.findingsRefinements.list
- chronicle.findingsRefinements.test
- chronicle.globalDataAccessScopes.permit
- chronicle.ingestionLogLabels.get
- chronicle.ingestionLogLabels.list
- chronicle.ingestionLogNamespaces.get
- chronicle.ingestionLogNamespaces.list
- chronicle.instances.get
- chronicle.iocAssociations.batchGet
- chronicle.iocAssociations.fetchRelatedIocAssociations
- chronicle.iocAssociations.fetchRelatedThreatCollections
- chronicle.iocAssociations.get
- chronicle.legacies.legacyBatchGetCases
- chronicle.legacies.legacyBatchGetCollections
- chronicle.legacies.legacyFetchAlertsView
- chronicle.legacies.legacyFetchUdmSearchCsv
- chronicle.legacies.legacyFetchUdmSearchView
- chronicle.legacies.legacyFindAssetEvents
- chronicle.legacies.legacyFindRawLogs
- chronicle.legacies.legacyFindUdmEvents
- chronicle.legacies.legacyGetAlert
- chronicle.legacies.legacySearchArtifactEvents
- chronicle.legacies.legacySearchArtifactIoCDetails
- chronicle.legacies.legacySearchAssetEvents
- chronicle.legacies.legacySearchCustomerStats
- chronicle.legacies.legacySearchDomainsRecentlyRegistered
- chronicle.legacies.legacySearchDomainsTimingStats
- chronicle.legacies.legacySearchEnterpriseWideAlerts
- chronicle.legacies.legacySearchEnterpriseWideIoCs
- chronicle.legacies.legacySearchFindings
- chronicle.legacies.legacySearchIngestionStats
- chronicle.legacies.legacySearchIoCInsights
- chronicle.legacies.legacySearchRawLogs
- chronicle.legacies.legacySearchUserEvents
- chronicle.logTypeSchemas.list
- chronicle.logs.export
- chronicle.logs.get
- chronicle.logs.list
- chronicle.messages.get
- chronicle.messages.list
- chronicle.multitenantDirectories.get
- chronicle.nativeDashboards.get
- chronicle.nativeDashboards.list
- chronicle.operations.get
- chronicle.operations.list
- chronicle.operations.streamSearch
- chronicle.operations.wait
- chronicle.preferenceSets.get
- chronicle.preferenceSets.update
- chronicle.searchQueries.create
- chronicle.searchQueries.delete
- chronicle.searchQueries.get
- chronicle.searchQueries.list
- chronicle.searchQueries.update
- chronicle.threatCollections.fetchIocMatchMetadata
- chronicle.threatCollections.fetchRuleMetadata
- chronicle.threatCollections.get
- chronicle.threatCollections.list
- resourcemanager.projects.get
- resourcemanager.projects.list