Controls access to the generation and management of documented security summaries, ranging from shift handoffs to compliance evidence
Cortex XSIAM enforces least-privileged per-object access by allowing you to manage access for custom (user-defined) report templates. For more information, see [Manage access to objects](../../../onboard-cortex-xsiam/post-deployment/manage-user-roles-and-access-management/manage-access-to-objects).
| Permission | Description | Roles Example |
| ---------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------- |
| Enabled | <p>Access permissions change depending on the per-object access and sub-permissions granted as explained below. For example, when Reports are enabled users can view existing reports, but access to the Widget Library is dependent on Editor permissions.</p><p>Other access permissions include create, manage, and delete report templates, and generate new reports.</p><p>When set to <strong>Enabled</strong>, you can grant the following additional permissions:</p><ul><li><strong>Create Report Templates</strong>: Enables the <strong>New Template</strong> button, allowing the user to create new custom report templates. The user who creates the report template is designated as the <strong>Owner</strong>.</li><li><strong>Edit Public Report Templates</strong>: Allows the user to modify custom report templates set to <strong>Public</strong>, even if they are not the <strong>Owner</strong>.</li></ul> | Most roles should be able to view and edit reports. |
| Disabled | Users cannot access reports or report templates. | |
### Required and recommended permissions
Reports rely on populating data from various functional modules. For reports to be complete, consider the following dependencies:
| Permission | Permission Level | Reason |
| --------------------- | ---------------- | --------------------------------------------------------------------------------------------- |
| Cases & Issues | View | Required. Reports containing cases/issue statistics require this permission to populate data. |
| Agent Administrations | View | Strongly Recommended. Reports containing endpoint metrics require this permission. |
| Asset Inventory | View | Recommended: Reports containing asset information require this permission. |
| Compliance | View | Recommended. Compliance reports require this permission to include compliance metrics. |