Network Scanners permissions ↗

Abstract

Configure Network Scanner permissions (under Integrations).

Located under Settings → Configurations → Network Scanning, this permission allows administrators to set up scan definitions, manage credentials for authenticated scans, configure targets, and view results.

Notice

Requires either the ASM and the Exposure Management add-ons, or a Cortex XSIAM Premium license with the Exposure Management add-on.

For more information, see Cortex Network Scanner.

Note

While configured under Integrations, Network Scanners serve as the active discovery engine for the broader vulnerability lifecycle. Data generated here directly populates the Vulnerability Management and Exposure Management modules.

Permission

Description

Role Example

None

Users cannot access the Network Scanners page.

SOC Tier-1 and 2 Analysts: No scanning responsibilities.

View

Users can view existing scanner configurations and scan results, but cannot create, run, or modify scans.

  • SOC Tier-3 Analyst: Review scan configurations.

  • Threat Hunter: Review scan data.

View/Edit

Full control to create, configure, run, and delete network scan configurations

Security Engineer: Configure vulnerability scanning.