Roles and Permissions
Regroup Threat Intelligence uses role-based permissions to control the actions users can perform in different areas of the application. The available roles are:
-
TIP Admin
-
TIP Analyst
-
TIP Operator
Each role provides a different level of access to Dashboards and Alert Channels, Assets, Triggers, and Files.
TIP Admin
The TIP Admin role provides the highest level of access across the Threat Intelligence Platform. Users with this role can create and manage dashboards, Alert Channels, assets, triggers, and files.
TIP Admin Permissions
| Section | Permissions |
|---|---|
| Dashboard / Alert Channels | Create, View, Update, Delete |
| Assets | Import, Create, View, Delete |
| Triggers | Create, View, Update, Delete |
| Files | Create, View, Update, Delete |
TIP Analyst
The TIP Analyst role provides management access to existing dashboards, Alert Channels, assets, and triggers, while providing full management access to Files.
TIP Analyst Permissions
| Section | Permissions |
|---|---|
| Dashboard / Alert Channels | View, Update |
| Assets | View, Update |
| Triggers | View, Update |
| Files | Create, View, Update, Delete |
TIP Operator
The TIP Operator role provides read-only access to the areas included in the permissions matrix. This role is appropriate for users who need to monitor Threat Intelligence information without creating or modifying configurations.
TIP Operator Permissions
| Section | Permissions |
|---|---|
| Dashboard / Alert Channels | View |
| Assets | View |
| Triggers | View |
| Files | View |