roles/chronicle.soarEngineer

Title: Chronicle SOAR Engineer

Description: Grants Engineer access to Chronicle SOAR.

Stage: BETA

Role Type: Predefined

148 Assigned Permissions:

🔍

chronicle.attachments.delete

chronicle.attachments.get

chronicle.attachments.update

chronicle.caseAlerts.get

chronicle.caseAlerts.metadataUpdate

chronicle.caseAlerts.move

chronicle.caseAlerts.updateSla

chronicle.caseCloseDefinitions.delete

chronicle.caseCloseDefinitions.get

chronicle.caseCloseDefinitions.update

chronicle.caseComments.delete

chronicle.caseComments.get

chronicle.caseComments.update

chronicle.caseQueueFilters.delete

chronicle.caseQueueFilters.get

chronicle.caseQueueFilters.update

chronicle.caseStageDefinitions.get

chronicle.caseTagDefinitions.delete

chronicle.caseTagDefinitions.get

chronicle.caseTagDefinitions.update

chronicle.caseWallRecords.get

chronicle.caseWallRecords.update

chronicle.cases.close

chronicle.cases.generateReport

chronicle.cases.get

chronicle.cases.removeTag

chronicle.cases.reopen

chronicle.cases.update

chronicle.cases.updateTag

chronicle.chatMessages.create

chronicle.chatMessages.get

chronicle.chatMessages.pin

chronicle.connectorInstanceLogs.get

chronicle.connectorInstances.delete

chronicle.connectorInstances.get

chronicle.connectorInstances.update

chronicle.connectorRevisions.delete

chronicle.connectorRevisions.get

chronicle.connectorRevisions.update

chronicle.contentPacks.create

chronicle.contentPacks.delete

chronicle.contentPacks.export

chronicle.contentPacks.get

chronicle.contentPacks.install

chronicle.contextProperties.delete

chronicle.contextProperties.get

chronicle.contextProperties.update

chronicle.customFieldValues.get

chronicle.customFieldValues.update

chronicle.customFields.get

chronicle.customLists.get

chronicle.emailTemplates.get

chronicle.entitiesBlocklists.get

chronicle.environmentGroups.get

chronicle.environments.get

chronicle.integrationActionRevisions.delete

chronicle.integrationActionRevisions.get

chronicle.integrationActionRevisions.update

chronicle.integrationActions.get

chronicle.integrationActions.run

chronicle.integrationActions.update

chronicle.integrationInstances.delete

chronicle.integrationInstances.get

chronicle.integrationInstances.update

chronicle.integrations.get

chronicle.integrations.update

chronicle.involvedEntities.get

chronicle.involvedEntities.update

chronicle.jobInstanceLogs.get

chronicle.jobInstances.delete

chronicle.jobInstances.get

chronicle.jobInstances.run

chronicle.jobInstances.update

chronicle.jobRevisions.delete

chronicle.jobRevisions.get

chronicle.jobRevisions.update

chronicle.jobs.get

chronicle.jobs.update

chronicle.legacyCases.createSimulated

chronicle.legacyCases.deleteSimulated

chronicle.legacyCases.exportJson

chronicle.legacyCases.get

chronicle.legacyCases.getSimulated

chronicle.legacyCases.importJson

chronicle.legacyCases.ingest

chronicle.legacyCases.ingestAlertTestCase

chronicle.legacyCases.runManualAction

chronicle.legacyCases.simulate

chronicle.legacyPlaybooks.delete

chronicle.legacyPlaybooks.export

chronicle.legacyPlaybooks.get

chronicle.legacyPlaybooks.import

chronicle.legacyPlaybooks.update

chronicle.legacySearches.searchCases

chronicle.legacySearches.searchEntities

chronicle.legacySoarAdvancedReports.delete

chronicle.legacySoarAdvancedReports.get

chronicle.legacySoarAdvancedReports.share

chronicle.legacySoarAdvancedReports.update

chronicle.legacySoarDashboards.delete

chronicle.legacySoarDashboards.get

chronicle.legacySoarDashboards.update

chronicle.legacySoarReports.delete

chronicle.legacySoarReports.get

chronicle.legacySoarReports.update

chronicle.legacySoarUsers.get

chronicle.legacySystemMetadata.get

chronicle.managerRevisions.delete

chronicle.managerRevisions.get

chronicle.managerRevisions.update

chronicle.managers.delete

chronicle.managers.get

chronicle.managers.update

chronicle.marketplaceIntegrations.get

chronicle.marketplaceIntegrations.install

chronicle.marketplaceIntegrations.uninstall

chronicle.moduleSettings.rebranding

chronicle.notificationSettings.get

chronicle.notificationSettings.update

chronicle.ontologyRecords.get

chronicle.remoteAgents.delete

chronicle.remoteAgents.get

chronicle.remoteAgents.update

chronicle.requestTemplates.get

chronicle.soarDomains.get

chronicle.soarNetworks.get

chronicle.tasks.delete

chronicle.tasks.get

chronicle.tasks.update

chronicle.uniqueEntities.get

chronicle.uniqueEntities.update

chronicle.userLocalizations.get

chronicle.userLocalizations.update

chronicle.userNotifications.get

chronicle.userNotifications.update

chronicle.visualFamilies.get

chronicle.webhooks.delete

chronicle.webhooks.get

chronicle.webhooks.ingestAlert

chronicle.webhooks.update

chronicle.workdeskContacts.delete

chronicle.workdeskContacts.get

chronicle.workdeskContacts.update

chronicle.workdeskNotes.delete

chronicle.workdeskNotes.get

chronicle.workdeskNotes.update

resourcemanager.projects.get

resourcemanager.projects.list