Roles management

Manage roles in Cortex XSOAR On-prem 8.7 (EoL).

You can assign the following permissions to various components in Cortex XSOAR:

Permission	Description
None	No access to the specified component.
View	View, but not edit the specified component.
View/Edit	View and edit the specified component.

Out-of-the-box roles

Cortex XSOAR includes the following out-of-the-box roles:

Role	Type	Description
Account Admin	Predefined	The user who supplied their credentials when installing Cortex XSOAR is assigned the Account Admin role. This user has view/edit permissions for all components and access to all pages in the Cortex XSOAR tenant (the same view/edit permissions as the Instance Administrator). You cannot create additional Account Admin roles in Cortex XSOAR. You cannot edit this role.
Instance Administrator	Predefined	View/edit permissions for all components and access to all pages in the Cortex XSOAR tenant. The Instance Administrator can also assign the Instance Administrator role to other users on the tenant. If the application has predefined or custom roles, the Instance Administrator can assign those roles to other users. You cannot edit this role. You can copy the role by saving it as a new role and then change permissions.
Analyst	Custom	A mix of view and view/edit permissions for all components and access to all pages in the Cortex XSOAR tenant.
Read-Only	Custom	Read permissions for all components and pages in the Cortex XSOAR tenant.

Note

By default, users do not have roles assigned. If no direct or user group role has been assigned, users have no permission to view or edit data in Cortex XSOAR.

Next steps

Before you start creating or customizing roles, do the following:

• Review the Role-based permissions topic.
• Decide whether you want to assign roles to users directly or through membership in user groups (recommended) in the Cortex XSOAR tenant.