Investigation and Response permissions

Configure role permissions for search, response, and automation capabilities in Cortex XSIAM.

Investigation and Response permissions are split as follows:

• Search permissions: Query Library permissions, Query Center permissions, Forensics permissions, Host Insights permissions, and Graph Search permissions.
• Response permissions: Action Center permissions, EDL permissions, Agent Scripts Library permissions, and Live Terminal permissions.
• Automation permissions: Playbook permissions, Script permissions, Jobs permissions, Playground permissions, and Automation Exclusion Center permissions.