3.1 Available Permissions

Some permissions are available for any deployed product. Other permissions depend on the capabilities that you have deployed.

3.1.1 Reports Permissions

The following table lists the permissions available when you add the Reports feature.

Function	Permission	Allows users to…
Reports	Report Admin	In the Reports Portal ... View dashboards and reports Create subfolders Schedule reports Create data worksheets, dashboards, and reports View Admin reports Manage the data source (not available in a SaaS environment)
Reports	Design Reports	In the Reports Portal ... View dashboards and reports Create subfolders Schedule reports Create data worksheets, dashboards, and reports
Reports	Schedule Reports	In the Reports Portal ... View dashboards and reports Create subfolders Schedule reports
Reports	View Reports	In the Reports Portal ... View dashboards and reports Create subfolders

3.1.2 Administrator Permissions

The following table lists the permissions needed to manage users.

Function	Permission	Allows users to…
Admin	View Users	View the list of all active and inactive users
Admin	Create Users	View users Assign roles to users Assign users to groups
Admin	Unlock Users	View users Unlock the account of a user that you manage
Admin	Activate/Deactivate Users	View users Change the status of a user that you manage
Admin	Change User Password	View users Change the password of a user that you manage
Admin	Change User Email	View users Change the email associated with a user
Admin	Assign Roles to Users	View users Assign roles that you currently have to users that you manage NOTE:If you have the Manage Roles permission, you can assign any role to a user.
Admin	Assign Users to Groups	View users Assign users that you manage to groups in which you currently are a member NOTE:If you have the Manage Groups permission, you can assign a user to any group.
Admin	Manage Groups	View users Assign users to groups
Admin	Manage Roles	View users Assign roles to users

3.1.3 ArcSight Permissions

The following table lists the permissions available when you deploy an ArcSight capability such as Recon or Intelligence.

Function	Permission	Allows users to…	Available with...
ArcMC	ArcMC System Admin	Perform System Admin functions (not available in a SaaS environment)	ArcMC
ArcMC	ArcMC Operation Admin	Perform all Operations functions, but does not have access to System Admin (not available in a SaaS environment)	ArcMC
ArcMC	ArcMC System Viewer	Read only access to System Admin functions (not available in a SaaS environment)	ArcMC
ArcMC	ArcMC Operation Viewer	Read only access to Operations functions (not available in a SaaS environment)	ArcMC
Dashboards	Access Dashboard	View dashboards owned by or shared with the user Modify, delete, and export dashboards owned by the user Create or clone dashboards Import dashboards Set a dashboard as a personal default dashboard	Fusion
Dashboards	Share a Dashboard	Perform all actions associated with the Access Dashboard permission With the Manage Role permission, share the current dashboard with any role Without the Manage Role permission, share the current dashboard with any of the roles associated with the user’s role	Fusion
Intelligence	Access Intelligence	Log in and use Intelligence	Intelligence
Intelligence	View Intelligence Raw Events	Access Intelligence View raw event data	Intelligence
Intelligence	Tune Intelligence Analytics	Access Intelligence Fine-tune the importance applied by Analytics to the events in your source data	Intelligence
Intelligence	Access Intelligence Search Manager	Access Intelligence Use the Intelligence Search Manager tool for troubleshooting NOTE:Do not assign this permission or use the tool without first consulting Support Services. For more information, see the ArcSight Intelligence User Guide on the ArcSight Intelligence documentation site. In a SaaS environment, this permission is available only to the System Operations Administrator.	Intelligence
Searches	Execute Search	Execute searches using fieldsets, custom ranges dates, and search operators	Recon
Searches	Export Search Results	Export the search results in csv format	Recon
Searches	Never Expire Search Results	Configure searches to never expire	Recon
Searches	Scheduled Searches	Create and manage scheduled searches	Recon
Searches	Manage Outlier Models and Scoring	Create and delete Outliers models Build and pause the scoring processes	Recon
Searches	Manage Lookup Lists	Add, configure, view, and delete lookup lists	Recon
Searches	Create Fieldsets	Create, edit, and delete fieldsets	Recon
Admin	Access Database Monitoring	Access the APIs for monitoring the database (not available in a SaaS environment)	Capabilities that require the ArcSight Database
Admin	Manage Storage Groups	Create and manage storage groups	Recon
Admin	Manage Kafka	Access Kafka Manager for Transformation Hub (not available in a SaaS environment)	Transformation Hub