Vulnerability Management permissions

Configure permissions for Vulnerability Management.

Controls access to Vulnerability Management, which provides a centralized view of vulnerabilities across your organization to track, prioritize, and remediate discovered CVEs and exposures.

For more information, see Vulnerability management in Cortex XSIAM.

Permission	Description	Roles Example
None	No access to Vulnerability Management pages, such as Vulnerability Issues, Findings, CVEs, and Vulnerability Policies.
View	Read-only access to Vulnerability Management pages, such as Vulnerability Issues, Findings, CVEs, and Vulnerability Policies.	SOC Tier 1 and 2 Analysts: Needs visibility into vulnerabilities for initial triage; should not modify rules or policies. Threat Hunter: Needs read access for threat research and correlation; typically does not modify rules or policies.
View/Edit	Full access to manage vulnerability issues (change status, assign, change severity), create/edit vulnerability policies (where relevant).	SOC Tier 3 Analyst: Senior analysts who can manage vulnerability issue lifecycle. Security Engineer: Configures vulnerability remediation workflows.

Required and recommended permissions

To effectively prioritize and respond to vulnerabilities, administrators and analysts require visibility into the underlying attack surface rules, active tests, and resulting security issues. Consider adding the following permissions.

Permission	Permission Level	Reason
Cases & Issues	View or View/Edit	View: Strongly recommended to view cases/issues linked to vulnerability issues. View/Edit: Recommended to actively triage and respond to issues linked to exposure findings.
Attack Surface Rules	View	Strongly recommended to view the attack surface rules referenced in the vulnerability context.
Asset Inventory	View	Recommended. Provides necessary context regarding which specific assets are affected by the security control gaps.