Investigation and Response permissions ↗

Abstract

Configure investigation and response permissions, which include search, response, and automation permissions.

Investigation and Response permissions are split as follows:

  • Search permissions: Includes Query Library, Query Center, Forensics, and Graph Search

  • Response permissions: Includes Action Center, EDL, Agents Script Library, and Live Terminal.

  • Automation permissions: Includes Playbooks, Scripts, Playground, and Automation Exclusion Center.