Graph Search permissions ↗

Abstract

Configure access to the Graph Search.

Limits access to Graph Search Investigation & Response → Search → Query Builder → Graph Search), which enables visual exploration of cloud asset relationships, configurations, and security findings through an interactive graph interface, such as discovering cloud asset relationships, investigating security findings, and analyzing effective permissions.

Notice

Graph Search requires a Cloud Posture Security, Cloud Runtime Security, or Cortex XSIAM Premium license.

For more information, see Graph Search.

Permission

Description

Roles Example

Graph Search

Cannot view the Graph Search page, execute graph queries, or view saved queries.

View

Execute graph queries, export, and support all view capabilities, such as viewing recent queries, graph definitions, and runtime events.

View/Edit

Full access to use the graph and save specific graph views or templates for others to use.

  • SOC Tier-1, 2, and 3 Analysts: Save graph queries for reuse in investigations.

  • Threat Hunter: Full graph search for cloud threat hunting.

  • Security Engineer: Full graph search for cloud security engineering/IT Admin.