IBM Support

SOAR: What are the default permissions for the out of the box user roles?

Question & Answer


Question

What are the default permissions for the out of the box user roles?

Answer

Note: The following are the default roles and default permissions. These values can be adjusted, and in most environments are modified. Environments might also have custom roles not indicated.
User Roles
Default Observer Administration Master Admin
Incident/Task/Attachment
View If member* Yes Yes Yes
Modify If member* If owner** Yes Yes
Reassign
If member*
If owner** Yes Yes
Delete (If not marked private) If member* If owner** Yes Yes
Create New Optional Optional Yes Yes
Notes (comment) If member* Yes Yes Yes
Filters
Private saved filters Yes Yes Yes Yes
Shared filters No No No No
Dashboards
Private saved filters Yes Yes Yes Yes
Shared custom dashboards No No No Yes
Report
Generate If member* Yes Yes Yes
Members
Add If owner** No Yes Yes
Remove If owner** No Yes Yes
Organization
Run Simulation No No Yes Yes
Edit Settings No No No Yes
Manage Users No No No Yes

Note: * if member of the incident, and ** if owner of the incident.

Related Information

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSIP9Q","label":"IBM Security SOAR"},"ARM Category":[{"code":"a8m0z000000cvfWAAQ","label":"Authentication"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
21 September 2023

UID

ibm17033168