Users can be granted access to CyberSecurity Asset Management (CSAM) features and functions based on Roles. These Roles are a consolidation of fine-grained Permissions. Managers have full rights and can configure roles and permissions using the Administration utility.
Navigate to the Administration module from the module picker. Within the Administration utility, you'll find roles and their related permissions in the Role Management section.
From the Administration utility, you can create custom roles to control which permissions should be assigned to a user with that role. By default, a Manager user is assigned all the permissions. A Manager user can decide and assign selective permissions to sub-users as per the need. For example, a user can be given specific access to create, edit, and delete dashboards but not update an asset.
Note: When you assign the Global Dashboard permissions to a role, the Global Dashboard permissions override the module-specific dashboard permissions. As a result, the module-specific dashboard permissions are ignored.
From the Administration utility, you can create custom roles to control which tagging permissions should be assigned to a user with that role. By default, a Manager user is assigned all the tagging permissions. A Manager user can decide and assign selective tagging permissions to sub-users as per the need. For example, a user can be given specific access to create, edit, and delete user tags but not to modify dynamic tag rules.