Investigation and Response permissions ↗
Investigation and Response permissions are split as follows:
- Search permissions: Query Library permissions, Query Center permissions, Forensics permissions, Host Insights permissions, and Graph Search permissions.
- Response permissions: Action Center permissions, EDL permissions, Agent Scripts Library permissions, and Live Terminal permissions.
- Automation permissions: Playbook permissions, Script permissions, Jobs permissions, Playground permissions, and Automation Exclusion Center permissions.