Manage roles in the Cortex AgentiX tenant

Create, edit, and manage roles in your Cortex AgentiX tenant.

On the Roles page, you can view all roles in Cortex AgentiX, whether they are custom roles, who created the role, when it was created, and additional information about the roles. When right-clicking on a role, you can edit the role and permissions.

Cortex AgentiX includes the following role types:

• Predefined roles: Includes Account Admin and Instance Administrator roles. Permissions cannot be changed. You can create a duplicate of these roles, but you cannot remove them.
• Custom roles: Includes out-of-the-box roles and custom roles.

When right-clicking a role, you can perform several actions, such as editing a role, saving it as a new role, and removing a role (deleting a role not assigned to a user).

If you want to edit a role, right-click the relevant user role and select Edit Role. If you want to create a new role based on an existing role, right-click the relevant user role and select Save As New Role.

Create a role

The roles you create provide more granular access control. You can add as many new roles as you need and combine them with user groups. When you create or edit a role, you can perform activities such as adding permissions and permission levels.

To create, edit, or delete a role, you must have administrator permissions.

Tip

For analysts, we recommend limiting specific permissions, such as:

• Removing the ability to install, delete, Marketplace/Data Sources, which should be reserved for engineers and administrators. We recommend setting these permissions for analysts to None or View.
• Removing access to API keys. Under CONFIGURATIONS , set the Public API access to None or View. If you select None, the user role can still use the API, but they cannot view API keys in the UI.

1. In the Cortex AgentiX tenant, select Settings → Configurations → Access Management → Roles → New Role.

   Tip

   We recommend making a copy of out-of-the-box roles and editing the copies, rather than creating new roles, to avoid missing any important permissions.
2. Add the Role name and a meaningful Description.
3. In the Components tab, add the permissions as required. For more information, see Role permissions by component.
4. Under Datasets (Disabled), you have two options for setting the Cortex Query Language (XQL) dataset access permissions for the user role:

   • Set the user role with access to all XQL datasets by leaving the dataset access management as disabled (default).
   • Set the user role with limited access to certain XQL datasets by selecting the Enable dataset access management toggle and selecting the datasets under the different dataset category headings.
5. Save the role.
6. You can create user groups and add roles to them (recommended), assign roles directly to users after they have been added, or both.