User Roles and Permissions

Access to the Qualys Core and Qualys ETM applications is restricted based on the user roles.

Roles and Permissions Required for Qualys Core

The following table presents the user groups and associated roles and permissions for the Qualys Core application:

Role

Permissions

x_qual5_core.admin

Grants full access to all features and records in the application, including create, read, update, and delete actions.

x_qual5_core.connector_user

Grants access to create, update, and delete Connector records.

x_qual5_core.
qualys_etm_incident_user

Provides access to view and manage ETM incidents and related information.

x_qual5_core.
general_settings

Grants access to read and update General Settings of the application.

x_qual5_core.import_user

Provides access to import set tables for debugging and API call monitoring.

x_qual5_core.user

Grants basic access to Qualys CORE data tables. This role is auto-assigned through add-on applications like Qualys VMDR and includes:

# Access to read the following

  • Qualys Tags / Asset Tags

  • Detection Event Rules

  • Specifically, the Name and Description attributes (and nothing else)

  • Qualys Asset Groups

  • Basic information for connectors, such as the name.

  • Access to ancillary functionality used by various functions of other applications.

import_admin

Provide access to data_source table for operations while importing data.

Roles and Permissions Required for Qualys ETM

The following table lists the user groups, their associated roles, and permissions for the Qualys ETM application.

Role

Permissions

x_qual5_etm.x_qual5_core.create_ci

Grants full access to all parts of the application, including creating, viewing, updating, and deleting records.

Add this property to the sys_properties table and set it to true.

 

Related Topic

Install the App