gcp-iam-catalog Roles Permissions
🔐

roles/chronicle.soarAdmin

Title Chronicle SOAR Admin
Stage BETA
Role Type Predefined
Permissions 278
Description Grants admin access to Chronicle SOAR.
🔍
chronicle.alertGroupingRules.delete
chronicle.alertGroupingRules.get
chronicle.alertGroupingRules.update
chronicle.announcements.delete
chronicle.announcements.get
chronicle.announcements.update
chronicle.attachments.delete
chronicle.attachments.get
chronicle.attachments.update
chronicle.calculatedFieldDefinitions.delete
chronicle.calculatedFieldDefinitions.get
chronicle.calculatedFieldDefinitions.update
chronicle.caseAlerts.get
chronicle.caseAlerts.metadataUpdate
chronicle.caseAlerts.move
chronicle.caseAlerts.updateSla
chronicle.caseCloseDefinitions.delete
chronicle.caseCloseDefinitions.get
chronicle.caseCloseDefinitions.update
chronicle.caseComments.delete
chronicle.caseComments.get
chronicle.caseComments.update
chronicle.caseQueueFilters.delete
chronicle.caseQueueFilters.get
chronicle.caseQueueFilters.update
chronicle.caseStageDefinitions.delete
chronicle.caseStageDefinitions.get
chronicle.caseStageDefinitions.update
chronicle.caseTagDefinitions.delete
chronicle.caseTagDefinitions.get
chronicle.caseTagDefinitions.update
chronicle.caseWallRecords.get
chronicle.caseWallRecords.update
chronicle.cases.close
chronicle.cases.countPriorities
chronicle.cases.generateReport
chronicle.cases.get
chronicle.cases.removeTag
chronicle.cases.reopen
chronicle.cases.update
chronicle.cases.updateTag
chronicle.chatMessages.create
chronicle.chatMessages.get
chronicle.chatMessages.pin
chronicle.connectorInstanceLogs.get
chronicle.connectorInstances.delete
chronicle.connectorInstances.get
chronicle.connectorInstances.update
chronicle.connectorRevisions.delete
chronicle.connectorRevisions.get
chronicle.connectorRevisions.update
chronicle.connectors.delete
chronicle.connectors.get
chronicle.connectors.update
chronicle.contentPacks.create
chronicle.contentPacks.delete
chronicle.contentPacks.export
chronicle.contentPacks.get
chronicle.contentPacks.install
chronicle.contextProperties.delete
chronicle.contextProperties.get
chronicle.contextProperties.update
chronicle.customFieldValues.get
chronicle.customFieldValues.update
chronicle.customFields.delete
chronicle.customFields.get
chronicle.customFields.update
chronicle.customLists.delete
chronicle.customLists.get
chronicle.customLists.update
chronicle.dataAccessScopes.list
chronicle.emailTemplates.delete
chronicle.emailTemplates.get
chronicle.emailTemplates.update
chronicle.entitiesBlocklists.delete
chronicle.entitiesBlocklists.get
chronicle.entitiesBlocklists.update
chronicle.environmentGroups.delete
chronicle.environmentGroups.get
chronicle.environmentGroups.update
chronicle.environments.delete
chronicle.environments.get
chronicle.environments.update
chronicle.formDynamicParameters.get
chronicle.formDynamicParameters.update
chronicle.instances.generateSoarAuthJwt
chronicle.instances.get
chronicle.instances.soarAdmin
chronicle.integrationActionRevisions.delete
chronicle.integrationActionRevisions.get
chronicle.integrationActionRevisions.update
chronicle.integrationActions.delete
chronicle.integrationActions.get
chronicle.integrationActions.run
chronicle.integrationActions.update
chronicle.integrationInstances.delete
chronicle.integrationInstances.get
chronicle.integrationInstances.update
chronicle.integrationLogicalOperatorRevisions.delete
chronicle.integrationLogicalOperatorRevisions.get
chronicle.integrationLogicalOperatorRevisions.update
chronicle.integrationLogicalOperators.delete
chronicle.integrationLogicalOperators.execute
chronicle.integrationLogicalOperators.get
chronicle.integrationLogicalOperators.update
chronicle.integrations.delete
chronicle.integrations.get
chronicle.integrations.update
chronicle.involvedEntities.get
chronicle.involvedEntities.update
chronicle.jobInstanceLogs.get
chronicle.jobInstances.delete
chronicle.jobInstances.get
chronicle.jobInstances.run
chronicle.jobInstances.update
chronicle.jobRevisions.delete
chronicle.jobRevisions.get
chronicle.jobRevisions.update
chronicle.jobs.delete
chronicle.jobs.get
chronicle.jobs.update
chronicle.legacyCaseFederationPlatforms.delete
chronicle.legacyCaseFederationPlatforms.get
chronicle.legacyCaseFederationPlatforms.update
chronicle.legacyCases.createManual
chronicle.legacyCases.createSimulated
chronicle.legacyCases.deleteSimulated
chronicle.legacyCases.exportJson
chronicle.legacyCases.get
chronicle.legacyCases.getSimulated
chronicle.legacyCases.importJson
chronicle.legacyCases.ingest
chronicle.legacyCases.ingestAlertTestCase
chronicle.legacyCases.runManualAction
chronicle.legacyCases.simulate
chronicle.legacyConfiguration.getMaximumAlertsGroupingConfiguration
chronicle.legacyFederatedCases.batchPatchFederatedCases
chronicle.legacyFederatedCases.fetchCasesToSync
chronicle.legacyFederatedCases.get
chronicle.legacyPlaybooks.delete
chronicle.legacyPlaybooks.export
chronicle.legacyPlaybooks.get
chronicle.legacyPlaybooks.import
chronicle.legacyPlaybooks.update
chronicle.legacyPublisher.get
chronicle.legacyPublisher.update
chronicle.legacySdk.get
chronicle.legacySdk.update
chronicle.legacySearches.searchCases
chronicle.legacySearches.searchEntities
chronicle.legacySoarAdvancedReports.delete
chronicle.legacySoarAdvancedReports.get
chronicle.legacySoarAdvancedReports.share
chronicle.legacySoarAdvancedReports.update
chronicle.legacySoarAudits.legacySoarAudit
chronicle.legacySoarDashboards.delete
chronicle.legacySoarDashboards.get
chronicle.legacySoarDashboards.update
chronicle.legacySoarIdpMappingGroups.delete
chronicle.legacySoarIdpMappingGroups.get
chronicle.legacySoarIdpMappingGroups.update
chronicle.legacySoarPermissionGroups.get
chronicle.legacySoarReports.delete
chronicle.legacySoarReports.get
chronicle.legacySoarReports.update
chronicle.legacySoarSettings.get
chronicle.legacySoarSettings.update
chronicle.legacySoarUsers.delete
chronicle.legacySoarUsers.get
chronicle.legacySystem.getLicenseStatus
chronicle.legacySystem.getMaximumDataRetentionValue
chronicle.legacySystem.getSystemVersion
chronicle.legacySystemMetadata.get
chronicle.legacySystemMetadata.placeholders
chronicle.managerRevisions.delete
chronicle.managerRevisions.get
chronicle.managerRevisions.update
chronicle.managers.delete
chronicle.managers.get
chronicle.managers.update
chronicle.mappingRules.delete
chronicle.mappingRules.get
chronicle.mappingRules.update
chronicle.marketplaceIntegrations.get
chronicle.marketplaceIntegrations.install
chronicle.marketplaceIntegrations.uninstall
chronicle.moduleSettings.get
chronicle.moduleSettings.rebranding
chronicle.moduleSettingsProperties.get
chronicle.moduleSettingsProperties.testSettings
chronicle.moduleSettingsProperties.update
chronicle.notificationSettings.get
chronicle.notificationSettings.update
chronicle.ontologyRecords.get
chronicle.ontologyRecords.update
chronicle.preferenceSets.get
chronicle.propertySchemaDefinitions.delete
chronicle.propertySchemaDefinitions.get
chronicle.propertySchemaDefinitions.update
chronicle.remoteAgents.delete
chronicle.remoteAgents.get
chronicle.remoteAgents.update
chronicle.requestTemplates.delete
chronicle.requestTemplates.get
chronicle.requestTemplates.update
chronicle.slaDefinitions.delete
chronicle.slaDefinitions.get
chronicle.slaDefinitions.update
chronicle.soarDomains.delete
chronicle.soarDomains.get
chronicle.soarDomains.update
chronicle.soarNetworks.delete
chronicle.soarNetworks.get
chronicle.soarNetworks.update
chronicle.socRoles.delete
chronicle.socRoles.get
chronicle.socRoles.update
chronicle.systemNotifications.get
chronicle.systemNotifications.update
chronicle.tasks.delete
chronicle.tasks.get
chronicle.tasks.update
chronicle.transformerDefinitions.create
chronicle.transformerDefinitions.delete
chronicle.transformerDefinitions.execute
chronicle.transformerDefinitions.get
chronicle.transformerDefinitions.list
chronicle.transformerDefinitions.update
chronicle.transformerRevisions.delete
chronicle.transformerRevisions.get
chronicle.transformerRevisions.update
chronicle.uniqueEntities.get
chronicle.uniqueEntities.update
chronicle.userLocalizations.get
chronicle.userLocalizations.update
chronicle.userNotifications.get
chronicle.userNotifications.update
chronicle.views.get
chronicle.views.update
chronicle.visualFamilies.delete
chronicle.visualFamilies.get
chronicle.visualFamilies.update
chronicle.webhooks.delete
chronicle.webhooks.get
chronicle.webhooks.update
chronicle.workdeskContacts.delete
chronicle.workdeskContacts.get
chronicle.workdeskContacts.update
chronicle.workdeskLinks.delete
chronicle.workdeskLinks.get
chronicle.workdeskLinks.update
chronicle.workdeskNotes.delete
chronicle.workdeskNotes.get
chronicle.workdeskNotes.update
cloudasset.assets.exportResource
cloudasset.assets.queryAccessPolicy
cloudasset.assets.queryIamPolicy
cloudasset.assets.queryOSInventories
cloudasset.assets.queryResource
cloudasset.assets.searchAllIamPolicies
cloudasset.assets.searchAllResources
cloudasset.assets.searchEnrichmentResourceOwners
resourcemanager.organizations.get
resourcemanager.projects.get
resourcemanager.projects.list
securitycenter.attackpaths.list
securitycenter.exposurepathexplan.get
securitycenter.findings.bulkMuteUpdate
securitycenter.findings.group
securitycenter.findings.list
securitycenter.findings.listFindingPropertyNames
securitycenter.findings.setMute
securitycenter.findings.setState
securitycenter.findings.update
securitycenter.findingsecuritymarks.update
securitycenter.simulations.get
securitycenter.userinterfacemetadata.get
securitycenter.valuedresources.list
🔍