User Roles and Permissions

The access to the Qualys Core and Qualys VMDR applications is restricted based on the user roles.

The following table presents the user groups and associated roles and permissions for Qualys Core application:

Role	Permissions
x_qual5_core.admin	Administrative user of the application. Create, Write, Read, and Delete access to all aspects of the application.
x_qual5_core.kb_read	Read access to the Qualys - KnowledgeBase records.
x_qual5_core.create _ci_from_host	Can see the Create CI UI action from host records.
x_qual5_core. api_data_receiver	Grants access to any Data Receiver API Endpoints that are available globally across the Qualys for ServiceNow app and add-ins. These endpoints are used to Push data from Qualys into ServiceNow. This role would need to be given to the ServiceNow Service Account that is being used by Qualys for API Authentication. # API Endpoints /api/x_qual5_core/v1/data_receiver/ {connector_sys_id}/vmdr/host_asset /api/x_qual5_core/v1/data_receiver/ {connector_sys_id}/vmdr/host_detection
x_qual5_core.connector_user	This role grants access to create, modify and delete Connector Records.
x_qual5_core. qualys_fim_incident_user	Has access to FIM Incidents and information related to them.
x_qual5_core. general_settings	Has access to read/write the General Settings values of the application.
x_qual5_core.import_user	Has access to the import_set tables for debugging and API Calls.
x_qual5_core.host_user	Has Read access to Host Asset Records and related information such as Asset Tags and Asset Groups.
x_qual5_core. launch_vm_scan	Role required to see/interact with Launching VM Scans.
x_qual5_core. patch_deployment_user	This role grants access to view and manage patch deployments for Change Request.
x_qual5_core. view_vm_scan	This role grants access to view VM Scans and related data, such as Option Profiles and Scanner Appliances.
x_qual5_core.user	This role grants basic access to the Data Tables within Qualys CORE and basic information within those tables. Typically, this role is not granted directly to users and is auto-granted based on the add-on application roles that come with Applications such as Qualys VMDR. # Access to read the following Qualys Tags/Asset Tags Detection Event Rules Specifically the Name and Description attributes (and nothing else) Qualys Asset Groups Basic information for connectors, such as name. Access to ancillary functionality used by various functions of other applications.
x_qual5_core. qualys_knowledgebase _user	This role grants READ-ONLY access to the Qualys KnowledgeBase.
import_admin	This role is required for accessing 'data_source' table operations while importing data.

The following table presents the user groups and associated roles and permissions for Qualys VMDR application.

Role	Permissions
x_qual5_vmdr.dashboard_viewer	Can access/view the dashboard from the VMDR Application.
x_qual5_vmdr.admin	Can create/read/write/delete items within this application scope.
x_qual5_vmdr.exception_approver	Can read vulnerability incidents where they are the Exception Approver, or if the incidents are assigned directly to them.
x_qual5_vmdr.false_positive_approver	Has access to read Vulnerability incidents where they are involved in the approval process for it (regardless of which approval step). Has additional access to edit fields required to be filled by the False Positive Approver on the vulnerability incidents, when they are involved in the approval for those vulnerability incidents.
x_qual5_vmdr.remediation_owner	This role is intended for Remediation Owners who need to perform work on VMDR incidents or VMDR incident Group records that belong to a Support/Assignment group they are a member of. ## VMDR incidents Grants Read/Write access to VMDR incidents and Related Functions where the logged in user is a member of the Assignment Group for those incidents. ## VMDR incidents Group Grants Read/Write access to VMDR incidents Group Records and Related Functions where the logged in user is a member of the Assignment Group for those incidents.
x_qual5_vmdr.vulnerability_analyst	This role is intended for Security Analysts who must perform work or oversee all VMDR incidents and VMDR incident Group records, regardless of which Assignment Group they are associated with. ## VMDR incidents Grants Read/Write/Create access to all VMDR incidents and Related Functions. ## VMDR incidents Group Grants Read/Write/Create access to all VMDR incidents Group and Related Functions.

User Roles and Permissions

Related Topic