Skip to main content

Who is this article for?

Incydr
Code42 for Enterprise
CrashPlan for Enterprise

Incydr, yes.

CrashPlan for Enterprise, no.

Code42 for Enterprise, no.

CrashPlan for Small Business, no.

This article applies to Code42 cloud environments.

HOME
GETTING STARTED
RELEASE NOTES
FAQs
APIs
SYSTEM STATUS
Code42 Support

Permissions for Incydr

Overview

In Code42, roles are made up of permissions. To use Incydr features, your assigned roles give you permissions to use those features. This article lists the permissions needed to use Incydr features, and the roles that contain those permissions.

For guidance on assigning roles for Incydr, see Roles for Incydr. For complete information on all roles, see Roles reference.

Considerations

  • Assign roles with the necessary permissions so that users have the least level of privilege needed to perform their jobs. After assigning roles, test to confirm that users can perform their required tasks and can access the data they need.
  • The Customer Cloud Admin role should only be assigned to the "super user" administrator who has all possible rights in Code42. We recommend that you instead use the Insider Risk Admin role to provide administrator rights for Incydr.
  • If you have assigned the Security Center User role to administrators or analysts who use Incydr, we recommend reassigning them either the Insider Risk Admin or Insider Risk Analyst role instead, depending on their responsibilities. These roles are designed specifically for users of Incydr and only contain permissions for use with Incydr product plans. The Security Center User role not only contains permissions for users of Incydr, but also for users of the retired Code42 Gold product plan (the securitytools.data_read and securitytools.settings_write permissions).

Permissions needed to use Incydr

The following table shows the permissions needed to use Incydr features, and the roles that have those permissions. 

Click here for an image of the table if you have trouble viewing the table in your browser.

Permissions

Insider Risk Admin  Insider Risk Analyst  Insider Risk Read Only  Customer Cloud Admin  Security Center User  Departing Employee Manager  High Risk Employee Manager  Security Center - Restore  Audit Log Viewer 

alerting.alerts.read

View alert notifications

x

x

x

x

x

       

alerting.alerts.write

Modify alert notifications

x x   x x        

alerting.rules.read

View alert rules

x x x x x        

alerting.rules.write

Modify alert rules

x x   x x        

auditlog.read

View Audit Log

      x         x

cases.content.read

View cases

x x x x x        

cases.content.write

Modify cases

x x   x x        

dataconnections.settings.read

View data connections information

x x x x          

dataconnections.settings.write

Modify data connections settings

      x          

datapreferences.settings.read

View data preferences

x x x x          

datapreferences.settings.write

Modify data preferences

x x   x          

detectionlists.departingemployee.read

View the Departing Employees list

x   x x x x      

detectionlists.departingemployee.write

Modify the Departing Employees list

x     x x x      

detectionlists.departingemployeealerts.read

View Departing Employees alert settings

x   x x x x      

detectionlists.departingemployeealerts.write

Modify Departing Employees alert settings

x     x x x      

detectionlists.highriskemployee.read

View the High Risk Employees list

x   x x x   x    

detectionlists.highriskemployee.write

Modify the High Risk Employees list

x     x x   x    

detectionlists.highriskemployeealerts.read

View High Risk Employees alert settings

x   x x x   x    

detectionlists.highriskemployeealerts.write

Modify High Risk Employees alert settings

x     x x   x    

detectionlists.userprofile.read

View user profiles

x x x x x        

detectionlists.userprofile.write

Modify user profiles

x x   x x        

detectionlists.userprofilenotes.read

View user profile notes

x x x x x        

detectionlists.userprofilenotes.write

Modify user profile notes

x x   x x        

fileforensics.restore

Download files from Forensic Search

      x       x  

fileforensics.settings_write

Edit Forensic Search settings

      x x        

search.fileevents.read

Search file event data in Forensic Search

x x x x x        

search.saved.read

View saved searches in Forensic Search

x x x x x        

search.saved.write

Modify saved searches in Forensic Search

x x   x x        

visualizations.endpointhealth.read

View the endpoint dashboard

x x x x x        

visualizations.risksummaries.read

View the Risk Exposure dashboard

x x x x x        
  • Was this article helpful?