User Roles and Permissions

Access to the Qualys Core and Qualys FIM applications is restricted based on the user roles.

Roles and Permissions Required for Qualys Core

The following table presents the user groups and associated roles and permissions for the Qualys Core application:

Role

Permissions

x_qual5_core.admin

Grants full access to all features and records in the application, including create, read, update, and delete actions.

x_qual5_core.connector_user

Grants access to create, update, and delete Connector records.

x_qual5_core.
qualys_fim_incident_user

Provides access to view and manage FIM incidents and related information.

x_qual5_core.
general_settings

Grants access to read and update General Settings of the application.

x_qual5_core.import_user

Provides access to import set tables for debugging and API call monitoring.

x_qual5_core.user

Grants basic access to Qualys CORE data tables. This role is auto-assigned through add-on applications like Qualys VMDR and includes:

# Access to read the following

  • Qualys Tags / Asset Tags

  • Detection Event Rules

  • Specifically, the Name and Description attributes (and nothing else)

  • Qualys Asset Groups

  • Basic information for connectors, such as the name.

  • Access to ancillary functionality used by various functions of other applications.

import_admin

Provide access to data_source table for operations while importing data.

Roles and Permissions Required for Qualys FIM

The following table presents the user groups and associated roles and permissions for the Qualys FIM application.

Role

Permissions

x_qual5_fim.admin Grants full access to all parts of the application, including creating, viewing, updating, and deleting records.
x_qual5_ core.fim_event_profile_user Grants access to view and manage FIM event profiles and related details.
x_qual5_ core.fim_incident_event_queue_user Grants access to view and manage the FIM incident event queue.
x_qual5_ core.import_configuration_fim_incident_event Grants access to view and manage FIM incident events.
x_qual5_ core.import_configuration_fim_incident_user Grants access to view and manage FIM incidents.
x_qual5_ core.qualys_fim_incident_events_user Grants access to view and manage FIM incident events.
x_qual5_ core.qualys_fim_incident_user Grants access to view and manage FIM incidents.
incident_manager Grants access to view and manage records in the incident table.
 

Related Topic

Install the App