roles/chronicle.viewer
Title: Chronicle API Viewer
Description: Readonly access to the Chronicle API resources.
Stage: GA
159 Assigned Permissions:
- chronicle.ais.createFeedback
- chronicle.ais.translateUdmQuery
- chronicle.ais.translateYlRule
- chronicle.analyticValues.list
- chronicle.analytics.list
- chronicle.cases.countPriorities
- chronicle.collectors.get
- chronicle.collectors.list
- chronicle.conversations.get
- chronicle.conversations.list
- chronicle.curatedRuleSetCategories.countAllCuratedRuleSetDetections
- chronicle.curatedRuleSetCategories.get
- chronicle.curatedRuleSetCategories.list
- chronicle.curatedRuleSetDeployments.get
- chronicle.curatedRuleSetDeployments.list
- chronicle.curatedRuleSets.countCuratedRuleSetDetections
- chronicle.curatedRuleSets.get
- chronicle.curatedRuleSets.list
- chronicle.curatedRules.get
- chronicle.curatedRules.list
- chronicle.dashboardCharts.get
- chronicle.dashboardCharts.list
- chronicle.dashboardQueries.execute
- chronicle.dashboardQueries.get
- chronicle.dashboardQueries.list
- chronicle.dashboards.get
- chronicle.dashboards.list
- chronicle.dashboards.schedule
- chronicle.dataAccessScopes.list
- chronicle.dataExports.fetchLogTypesAvailableForExport
- chronicle.dataExports.get
- chronicle.dataTableOperationErrors.get
- chronicle.dataTableRows.get
- chronicle.dataTableRows.list
- chronicle.dataTables.get
- chronicle.dataTables.list
- chronicle.dataTaps.get
- chronicle.dataTaps.list
- chronicle.enrichmentControls.get
- chronicle.enrichmentControls.list
- chronicle.entities.find
- chronicle.entities.findRelatedEntities
- chronicle.entities.get
- chronicle.entities.list
- chronicle.entities.queryEntityRiskScoreModifications
- chronicle.entities.searchEntities
- chronicle.entities.summarize
- chronicle.entities.summarizeFromQuery
- chronicle.entityRiskScores.queryEntityRiskScores
- chronicle.errorNotificationConfigs.get
- chronicle.errorNotificationConfigs.list
- chronicle.events.batchGet
- chronicle.events.findUdmFieldValues
- chronicle.events.get
- chronicle.events.queryProductSourceStats
- chronicle.events.searchRawLogs
- chronicle.events.udmSearch
- chronicle.events.validateQuery
- chronicle.findingsGraphs.exploreNode
- chronicle.findingsGraphs.initializeGraph
- chronicle.findingsRefinementDeployments.get
- chronicle.findingsRefinementDeployments.list
- chronicle.findingsRefinements.computeActivity
- chronicle.findingsRefinements.computeAllActivities
- chronicle.findingsRefinements.get
- chronicle.findingsRefinements.list
- chronicle.findingsRefinements.test
- chronicle.forwarders.generate
- chronicle.forwarders.get
- chronicle.forwarders.list
- chronicle.globalDataAccessScopes.permit
- chronicle.ingestionLogLabels.get
- chronicle.ingestionLogLabels.list
- chronicle.ingestionLogNamespaces.get
- chronicle.ingestionLogNamespaces.list
- chronicle.instances.generateCollectionAgentAuth
- chronicle.instances.generateSoarAuthJwt
- chronicle.instances.get
- chronicle.instances.logTypeClassifier
- chronicle.instances.report
- chronicle.iocMatches.get
- chronicle.iocMatches.list
- chronicle.iocState.get
- chronicle.iocs.batchGet
- chronicle.iocs.findFirstAndLastSeen
- chronicle.iocs.get
- chronicle.iocs.searchCuratedDetectionsForIoc
- chronicle.legacies.legacyBatchGetCases
- chronicle.legacies.legacyFetchAlertsView
- chronicle.legacies.legacyFetchUdmSearchCsv
- chronicle.legacies.legacyFetchUdmSearchView
- chronicle.legacies.legacyFindAssetEvents
- chronicle.legacies.legacyFindRawLogs
- chronicle.legacies.legacyFindUdmEvents
- chronicle.legacies.legacyGetAlert
- chronicle.legacies.legacyGetCuratedRulesTrends
- chronicle.legacies.legacyGetDetection
- chronicle.legacies.legacyGetEventForDetection
- chronicle.legacies.legacyGetRuleCounts
- chronicle.legacies.legacyGetRulesTrends
- chronicle.legacies.legacyRunTestRule
- chronicle.legacies.legacySearchArtifactEvents
- chronicle.legacies.legacySearchArtifactIoCDetails
- chronicle.legacies.legacySearchAssetEvents
- chronicle.legacies.legacySearchCuratedDetections
- chronicle.legacies.legacySearchCustomerStats
- chronicle.legacies.legacySearchDetections
- chronicle.legacies.legacySearchDomainsRecentlyRegistered
- chronicle.legacies.legacySearchDomainsTimingStats
- chronicle.legacies.legacySearchEnterpriseWideAlerts
- chronicle.legacies.legacySearchEnterpriseWideIoCs
- chronicle.legacies.legacySearchFindings
- chronicle.legacies.legacySearchIngestionStats
- chronicle.legacies.legacySearchIoCInsights
- chronicle.legacies.legacySearchRawLogs
- chronicle.legacies.legacySearchRuleDetectionCountBuckets
- chronicle.legacies.legacySearchRuleDetectionEvents
- chronicle.legacies.legacySearchRuleResults
- chronicle.legacies.legacySearchRulesAlerts
- chronicle.legacies.legacySearchUserEvents
- chronicle.legacies.legacyStreamDetectionAlerts
- chronicle.legacies.legacyTestRuleStreaming
- chronicle.logTypeSchemas.list
- chronicle.logs.export
- chronicle.logs.get
- chronicle.logs.list
- chronicle.messages.get
- chronicle.messages.list
- chronicle.multitenantDirectories.get
- chronicle.nativeDashboards.get
- chronicle.nativeDashboards.list
- chronicle.operations.get
- chronicle.operations.list
- chronicle.operations.streamSearch
- chronicle.operations.wait
- chronicle.preferenceSets.get
- chronicle.preferenceSets.update
- chronicle.referenceLists.get
- chronicle.referenceLists.list
- chronicle.referenceLists.verifyReferenceList
- chronicle.retrohunts.get
- chronicle.retrohunts.list
- chronicle.riskConfigs.get
- chronicle.ruleDeployments.get
- chronicle.ruleDeployments.list
- chronicle.ruleExecutionErrors.list
- chronicle.rules.get
- chronicle.rules.list
- chronicle.rules.listRevisions
- chronicle.rules.verifyRuleText
- chronicle.searchQueries.create
- chronicle.searchQueries.delete
- chronicle.searchQueries.get
- chronicle.searchQueries.list
- chronicle.searchQueries.update
- chronicle.watchlists.get
- chronicle.watchlists.list
- resourcemanager.projects.get
- resourcemanager.projects.list