19.2 Default Roles

Fusion provides several default roles. If you have the Manage Roles permission, you can change the permissions of any role assigned to your account except for those of the System Admin. You can also create additional roles that reflect your organization’s needs.

Some permissions are available only when their associated capability, such as Reports or ArcSight Recon, is deployed.

NOTE:As of the Fusion 1.4 release, some roles are no longer default roles. However, Fusion continues to display them if you deployed your environment before the roles were deprecated. For example, ArcMC User, Guest, User, and Report User are no longer default roles.

Default Role	Permissions
System Admin	All permissions
Admin	All Dashboard permissions All Intelligence permissions, except Access Intelligence Search Manager All Licensing and Usage permissions All Reports permissions All Searches permissions All User Management permissions Manage Storage Groups
Analyst	All Dashboard permissions Execute Search Manage Fieldsets Manage Search Queries/Criteria Access Intelligence View Intelligence Raw Events Schedule Reports View Reports
System Operations Administrator Not available to customers in a SaaS environment	All Dashboard permissions All ArcMC permissions Access Intelligence Search Manager Access Database Monitoring Manage Kafka