View Available Permissions

Some permissions are available for any deployed product. Other permissions depend on the capabilities that you have deployed.

Reports Permissions
User Management Permissions
ArcSight Permissions

Reports Permissions

The following table lists the permissions available when you add the Reports feature.

Function	Permissions	In the Reports Portal, allows users to…
Reports	Report Admin	View dashboards and reports Create subfolders Schedule reports Create data worksheets, dashboards, and reports View Admin reports Manage the data source (not available in a SaaS environment)
Reports	Design Reports	View dashboards and reports Create subfolders Schedule reports Create data worksheets, dashboards, and reports
Reports	Schedule Reports	View dashboards and reports Create subfolders Schedule reports
Reports	View Reports	View dashboards and reports Create subfolders

User Management Permissions

The following table lists the permissions needed to manage users.

Function	Permissions	Allows users to…
User Management	View Users	View the list of all active and inactive users
User Management	Create Users	View users Assign roles to users Assign users to groups
User Management	Activate /Deactivate Users	View users Change the status of a user that you manage
User Management	Change User Password	View users Change the password of a user that you manage
User Management	Change User Email	View users Change the email associated with a user
User Management	Assign Roles to Users	View users Assign roles that you currently have to users that you manage
User Management	Assign Users to Groups	View users View account groups Add and remove users from account groups that you currently manage Assign users who are members of account groups that you manage to any other account group
User Management	Manage Groups	View account groups Create account groups You are automatically added to the account groups that you create. Delete account groups that you currently manage Add and remove managers for account groups that you currently manage Add and remove users from account groups that you currently manage Assign users who are members of account groups that you manage to any other account group
User Management	Manage Roles	View roles Create roles You are automatically added to the account groups that you create. Add and remove users from roles that you have Add and remove any permission assigned to you from roles that you currently have Delete roles that you currently have

ArcSight Permissions

The following table lists the permissions available when you deploy an ArcSight capability such as ArcSight Recon.

Function	Permission	Allows users to…	Available with…
ArcMC	ArcMC System Admin Not available in a SaaS environment	Perform System Admin functions	Fusion
ArcMC	ArcMC Operation Admin Not available in a SaaS environment	Perform all Operations functions, but does not have access to System Admin	Fusion
ArcMC	ArcMC System Viewer Not available in a SaaS environment	Read only access to System Admin functions	Fusion
ArcMC	ArcMC Operation Viewer Not available in a SaaS environment	Read only access to Operations functions	Fusion
Dashboards	Share a dashboard	With the Manage Roles permission, share the current dashboard with any role Without the Manage Roles permission, share the current dashboard with any of the roles associated with the user’s role	Fusion
Licensing and Usage	Manage Contract	Create and edit an MSSP profile Import, update, view, and delete an MSSP contract	an MSSP license
Licensing and Usage	Access EPS Usage	Export an EPS Usage Report	an MSSP license
Searches	Execute Search	Execute searches using fieldsets, custom ranges dates, and search operators	Fusion
Searches	Export Search Results	Export the search results in csv format	Fusion
Searches	Never Expire Search Results	Configure searches to never expire	Fusion
Searches	Manage Scheduled Searches	Create and manage scheduled searches	Fusion
Searches	Import / Export Search Queries	Import and export search queries
Searches	Import / Export Search Criteria	Import and export search criteria
Searches	Perform Event Integrity Check	Run an Event Integrity Check and view the results
Searches	Manage Outlier Models and Scoring	Create and delete Outliers models Build and pause the scoring processes
Searches	Manage Lookup Lists	Add, configure, view, and delete lookup lists	Fusion
Searches	Manage Fieldsets	Create, edit, and delete fieldsets	Fusion
Searches	Manage Search Queries/Criteria	Create, clone, edit, delete,and view all previously saved search queries and search criteria View and clone all out-of-the-box search queries	Fusion
Searches	Logger Data Migration Not available in a SaaS environment	Execute a data migration from Logger into the ArcSight Database	Fusion
Operations Management	Access Database Monitoring-Overview	View high-level, summary information about the workload and health of the database	Capabilities that require the ArcSight Database
Operations Management	Access Database Monitoring-Details In a SaaS environment, available only to the System Operations Administrator	View details about the health of the individual components of the distributed database system	Capabilities that require the ArcSight Database
Operations Management	Manage Storage Groups	Create and manage storage groups	Fusion
Operations Management	Manage Kafka Not available in a SaaS environment	Access Kafka Manager for Transformation Hub	Transformation Hub