Compliance (Legacy) permissions

Configure permissions for legacy compliance features.

Cloud Compliance (Legacy) under Inventory → Endpoints → Cloud Compliance provides a read-only view of CIS benchmark compliance violations for cloud assets.

Permissions	Description	Roles Example
None	Cannot view the Compliance menu or any related pages.	SOC Tier-1 Analyst and Threat Hunter: Compliance monitoring is not part of daily triage/relevant to threat hunting.
View	Read-only permission to view CIS compliance violations for Cloud assets.	SOC Tier-2 and 3 Analysts: May reference compliance status/data during investigations/advanced analysis. Security Engineer: Monitor compliance posture.

Required and recommended permissions

Consider adding the following permissions:

Permission	Permission Level	Reason
Asset Inventory	View	Highly recommended to view assets associated with compliance violations.
Host Insights	View	Highly recommended to view endpoint details for the compliance context.
Dashboards	Enabled	Enabled: Recommended to view endpoint details for compliance context.
Query Center	View	Recommended to run XQL queries on network data.