Cloud Agent User Roles and Permissions
Cloud Agent has one out-of-the-box (OOTB) role for CA users:
CA Manager: This role has all the CA permissions.
The Cloud Agent module has several permission groups related to specific permission categories. The following are the categories of permissions with each of the related permissions groups for this module:
| Permissions | Description | Default Roles |
|---|---|---|
| CA Manager | ||
| CA Module Access Permissions | CA UI Access permission for sub-users |  |
| CA API Access Permission | |
|
| CA Agent Permissions | Enable/Disable self-protection | |
| Troubleshoot | |
|
| Launch On-Demand Scan | |
|
| Install, Uninstall, Activate, and Deactivate Agent | |
|
| Remote Log Collection | |
|
| CA Activation Key Permissions |
Change, View, Create, Edit, Delete, Enable, Disable Activation Key |
|
| Enable Module for Activation Key | |
|
| Add Tags to Activation Key | |
|
| CA Configuration Profile Permissions | View, Create, Edit, and Delete the Configuration profile. | |
| CA Vault Connection Permissions | View, Create, Edit, and Delete Configuration permissions. | |
| CA Subscription Level Settings Permissions | Disable Self-Protection | |
| CA Assessment Permissions | View, Create, Edit, and Delete Assessment | |
| CA CAPS Profile Permissions | View, Create, Edit CAPS profile | |
| CA SwCA Configuration Permissions | View, Create, Edit SwCA Permissions | |
| CA Agent Version Control Permissions | View, Create, Edit, and Delete Agent Version Control Profile | |
| CA Manifest Version Control Profile Permissions | View, Create, Edit, and Delete Manifest Version Control Profile | |