roles/chronicle.soarAdmin

Title: Chronicle SOAR Admin

Description: Grants admin access to Chronicle SOAR.

Stage: BETA

Role Type: Predefined

247 Assigned Permissions:

🔍

chronicle.alertGroupingRules.delete

chronicle.alertGroupingRules.get

chronicle.alertGroupingRules.update

chronicle.attachments.delete

chronicle.attachments.get

chronicle.attachments.update

chronicle.caseAlerts.get

chronicle.caseAlerts.metadataUpdate

chronicle.caseAlerts.move

chronicle.caseAlerts.updateSla

chronicle.caseCloseDefinitions.delete

chronicle.caseCloseDefinitions.get

chronicle.caseCloseDefinitions.update

chronicle.caseComments.delete

chronicle.caseComments.get

chronicle.caseComments.update

chronicle.caseQueueFilters.delete

chronicle.caseQueueFilters.get

chronicle.caseQueueFilters.update

chronicle.caseStageDefinitions.delete

chronicle.caseStageDefinitions.get

chronicle.caseStageDefinitions.update

chronicle.caseTagDefinitions.delete

chronicle.caseTagDefinitions.get

chronicle.caseTagDefinitions.update

chronicle.caseWallRecords.get

chronicle.caseWallRecords.update

chronicle.cases.close

chronicle.cases.countPriorities

chronicle.cases.generateReport

chronicle.cases.get

chronicle.cases.removeTag

chronicle.cases.reopen

chronicle.cases.update

chronicle.cases.updateTag

chronicle.chatMessages.create

chronicle.chatMessages.get

chronicle.chatMessages.pin

chronicle.connectorInstanceLogs.get

chronicle.connectorInstances.delete

chronicle.connectorInstances.get

chronicle.connectorInstances.update

chronicle.connectorRevisions.delete

chronicle.connectorRevisions.get

chronicle.connectorRevisions.update

chronicle.connectors.delete

chronicle.connectors.get

chronicle.connectors.update

chronicle.contentPacks.create

chronicle.contentPacks.delete

chronicle.contentPacks.export

chronicle.contentPacks.get

chronicle.contentPacks.install

chronicle.contextProperties.delete

chronicle.contextProperties.get

chronicle.contextProperties.update

chronicle.customFieldValues.get

chronicle.customFieldValues.update

chronicle.customFields.delete

chronicle.customFields.get

chronicle.customFields.update

chronicle.customLists.delete

chronicle.customLists.get

chronicle.customLists.update

chronicle.emailTemplates.delete

chronicle.emailTemplates.get

chronicle.emailTemplates.update

chronicle.entitiesBlocklists.delete

chronicle.entitiesBlocklists.get

chronicle.entitiesBlocklists.update

chronicle.environmentGroups.delete

chronicle.environmentGroups.get

chronicle.environmentGroups.update

chronicle.environments.delete

chronicle.environments.get

chronicle.environments.update

chronicle.formDynamicParameters.update

chronicle.instances.soarAdmin

chronicle.integrationActionRevisions.delete

chronicle.integrationActionRevisions.get

chronicle.integrationActionRevisions.update

chronicle.integrationActions.delete

chronicle.integrationActions.get

chronicle.integrationActions.run

chronicle.integrationActions.update

chronicle.integrationInstances.delete

chronicle.integrationInstances.get

chronicle.integrationInstances.update

chronicle.integrations.delete

chronicle.integrations.get

chronicle.integrations.update

chronicle.involvedEntities.get

chronicle.involvedEntities.update

chronicle.jobInstanceLogs.get

chronicle.jobInstances.delete

chronicle.jobInstances.get

chronicle.jobInstances.run

chronicle.jobInstances.update

chronicle.jobRevisions.delete

chronicle.jobRevisions.get

chronicle.jobRevisions.update

chronicle.jobs.delete

chronicle.jobs.get

chronicle.jobs.update

chronicle.legacyCaseFederationPlatforms.delete

chronicle.legacyCaseFederationPlatforms.get

chronicle.legacyCaseFederationPlatforms.update

chronicle.legacyCases.createSimulated

chronicle.legacyCases.deleteSimulated

chronicle.legacyCases.exportJson

chronicle.legacyCases.get

chronicle.legacyCases.getSimulated

chronicle.legacyCases.importJson

chronicle.legacyCases.ingest

chronicle.legacyCases.ingestAlertTestCase

chronicle.legacyCases.runManualAction

chronicle.legacyCases.simulate

chronicle.legacyConfiguration.getMaximumAlertsGroupingConfiguration

chronicle.legacyFederatedCases.batchPatchFederatedCases

chronicle.legacyFederatedCases.fetchCasesToSync

chronicle.legacyFederatedCases.get

chronicle.legacyPlaybooks.delete

chronicle.legacyPlaybooks.export

chronicle.legacyPlaybooks.get

chronicle.legacyPlaybooks.import

chronicle.legacyPlaybooks.update

chronicle.legacyPublisher.get

chronicle.legacyPublisher.update

chronicle.legacySdk.get

chronicle.legacySdk.update

chronicle.legacySearches.searchCases

chronicle.legacySearches.searchEntities

chronicle.legacySoarAdvancedReports.delete

chronicle.legacySoarAdvancedReports.get

chronicle.legacySoarAdvancedReports.share

chronicle.legacySoarAdvancedReports.update

chronicle.legacySoarAudits.legacySoarAudit

chronicle.legacySoarDashboards.delete

chronicle.legacySoarDashboards.get

chronicle.legacySoarDashboards.update

chronicle.legacySoarIdpMappingGroups.delete

chronicle.legacySoarIdpMappingGroups.get

chronicle.legacySoarIdpMappingGroups.update

chronicle.legacySoarReports.delete

chronicle.legacySoarReports.get

chronicle.legacySoarReports.update

chronicle.legacySoarSettings.get

chronicle.legacySoarSettings.update

chronicle.legacySoarUsers.delete

chronicle.legacySoarUsers.get

chronicle.legacySystem.getLicenseStatus

chronicle.legacySystem.getMaximumDataRetentionValue

chronicle.legacySystem.getSystemVersion

chronicle.legacySystemMetadata.get

chronicle.legacySystemMetadata.placeholders

chronicle.managerRevisions.delete

chronicle.managerRevisions.get

chronicle.managerRevisions.update

chronicle.managers.delete

chronicle.managers.get

chronicle.managers.update

chronicle.mappingRules.delete

chronicle.mappingRules.get

chronicle.mappingRules.update

chronicle.marketplaceIntegrations.get

chronicle.marketplaceIntegrations.install

chronicle.marketplaceIntegrations.uninstall

chronicle.moduleSettings.get

chronicle.moduleSettings.rebranding

chronicle.moduleSettingsProperties.get

chronicle.moduleSettingsProperties.testSettings

chronicle.moduleSettingsProperties.update

chronicle.notificationSettings.get

chronicle.notificationSettings.update

chronicle.ontologyRecords.get

chronicle.ontologyRecords.update

chronicle.propertySchemaDefinitions.delete

chronicle.propertySchemaDefinitions.get

chronicle.propertySchemaDefinitions.update

chronicle.remoteAgents.delete

chronicle.remoteAgents.get

chronicle.remoteAgents.update

chronicle.requestTemplates.delete

chronicle.requestTemplates.get

chronicle.requestTemplates.update

chronicle.slaDefinitions.delete

chronicle.slaDefinitions.get

chronicle.slaDefinitions.update

chronicle.soarDomains.delete

chronicle.soarDomains.get

chronicle.soarDomains.update

chronicle.soarNetworks.delete

chronicle.soarNetworks.get

chronicle.soarNetworks.update

chronicle.socRoles.delete

chronicle.socRoles.get

chronicle.socRoles.update

chronicle.systemNotifications.get

chronicle.systemNotifications.update

chronicle.tasks.delete

chronicle.tasks.get

chronicle.tasks.update

chronicle.uniqueEntities.get

chronicle.uniqueEntities.update

chronicle.userLocalizations.get

chronicle.userLocalizations.update

chronicle.userNotifications.get

chronicle.userNotifications.update

chronicle.views.get

chronicle.views.update

chronicle.visualFamilies.delete

chronicle.visualFamilies.get

chronicle.visualFamilies.update

chronicle.webhooks.delete

chronicle.webhooks.get

chronicle.webhooks.ingestAlert

chronicle.webhooks.update

chronicle.workdeskContacts.delete

chronicle.workdeskContacts.get

chronicle.workdeskContacts.update

chronicle.workdeskNotes.delete

chronicle.workdeskNotes.get

chronicle.workdeskNotes.update

cloudasset.assets.exportResource

cloudasset.assets.queryAccessPolicy

cloudasset.assets.queryIamPolicy

cloudasset.assets.queryOSInventories

cloudasset.assets.queryResource

cloudasset.assets.searchAllIamPolicies

cloudasset.assets.searchAllResources

cloudasset.assets.searchEnrichmentResourceOwners

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

securitycenter.attackpaths.list

securitycenter.exposurepathexplan.get

securitycenter.findings.bulkMuteUpdate

securitycenter.findings.group

securitycenter.findings.list

securitycenter.findings.listFindingPropertyNames

securitycenter.findings.setMute

securitycenter.findings.setState

securitycenter.findings.update

securitycenter.findingsecuritymarks.update

securitycenter.simulations.get

securitycenter.userinterfacemetadata.get

securitycenter.valuedresources.list

roles/chronicle.soarAdmin 📋 Copy

247 Assigned Permissions:

roles/chronicle.soarAdmin