> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security/asset-managment/asset-configurations/asset-roles.md). # Asset Roles {% hint style="info" %} ### Note Asset Roles are available only if the Identity Threat Module add-on is enabled. {% endhint %} The system continuously analyzes your users and endpoints, and automatically classifies them based on their activities under asset roles, for example, Domain Controller, Administrator, and Executive User. You can edit, add, and fine-tune the assets associated with each asset role at any time. Fine-tuned asset roles aid Cortex Cloud Analytics in the following areas. * Enhancement of the accuracy of the analytics that runs on assets, enabling better detection of uncommon activities by the asset based on the baseline for the asset role. * Asset role visualization in the Incident view, the User view, and the Host view as background information for risk assessment. * Analysis of User and Host peer groups for score trend comparison over selected timelines. You can add users and endpoints to any asset role manually or by importing a CSV file. You can remove users from asset roles manually and override the automatically detected asset roles. The tag family for asset roles provides the ability to slice and dice alerts and incidents. Automated and customizable asset role classification is based on constant analysis of the users and hosts in your network. You can edit and manage the User Asset Roles and Host Asset Roles to meet the needs of your organization. The asset roles configuration page displays the asset roles, their type, the number of assets that are associated with each asset role, and the last modification date. On this page, you can refresh the data, filter it, and change the layout. To edit an asset role, right-click and select **Edit Asset Role**. Depending on the type of asset, you can manage the user asset role list or the endpoint asset role list for the asset role. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security/asset-managment/asset-configurations/asset-roles.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.