> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-assets-permissions/asset-inventory-permissions.md).

# Asset Inventory permissions

Asset Inventory provides comprehensive visibility into organizational assets, such as a unified view of all assets (endpoints, cloud instances, domains, certificates), asset categorization and tagging, asset relationship mapping, and attack surface visibility.

Users access these features by going to **Inventory** → **Assets** → **All Assets**, where they can view assets such as all Cloud assets, AI assets, API Endpoints, Code assets, Compute assets, and data assets.

For more information, see [All assets](/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/all-assets.md).

The Asset Inventory permissions control the ability to view the unified asset landscape and manage overarching asset categorizations and tags.

| Permissions | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | Roles Example                                                                                                                                                                                                                                                                 |
| ----------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| None        | Cannot view the Asset Inventory menu from **Inventory** → **Assets** → **All Assets**. Viewing asset data in cases is limited.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |                                                                                                                                                                                                                                                                               |
| View        | Read-only access to the Asset Inventory Menu and categories, such as cloud assets, AI assets, API Endpoints, Code assets, Compute assets, and data assets. Users can browse assets but cannot modify tags or assignments.                                                                                                                                                                                                                                                                                                                                                                                                                           | <ul><li>SOC Tier 1 Analyst: Reference asset context during issue triage.</li><li>SOC Tier-2 Analyst: Investigate asset relationships.</li><li>SOC Tier-3 Analyst: Deep asset analysis for investigations.</li><li>Threat Hunters: Asset context for threat hunting.</li></ul> |
| View/Edit   | <p>Full access. Includes all View capabilities plus read and write access to all categories. Users can manage asset tags, annotations, custom properties, and business unit assignments across all asset categories.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p><strong>Note</strong></p><p>The asset inventory is primarily populated dynamically through agents and integrations. The View/Edit permission governs the management of asset metadata (such as assigning tags, setting business units, and modifying annotations) rather than the manual creation of the assets themselves.</p></div> | Security Engineer: Maintain asset inventory and tags.                                                                                                                                                                                                                         |

**Required and recommended permissions**

Consider adding the following permissions:

| Permission            | Permission Level | Reason                                                         |
| --------------------- | ---------------- | -------------------------------------------------------------- |
| Network Configuration | View             | Strongly recommended to view IP ranges associated with assets. |
| Host Insights         | View             | Strongly recommended to view detailed endpoint information.    |
| Agent Administrations | View             | Strongly recommended to view endpoint agent details.           |
| Query Center          | View             | Strongly recommended to run XQL queries on asset data.         |
| Asset Groups          | View             | Strongly recommended to view asset group memberships.          |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-assets-permissions/asset-inventory-permissions.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.