Default permissions assigned to a role
Following permissions are minimal permissions and are assigned to a role by default even if they are not provisioned.
ALERT_RULE:READ
ALERT:READ
API_KEY:READ
ASSET:READ
ASSET_CLOUD_INSTANCES:READ
ASSET_GROUP_RULE:READ
ATC_QUERY:READ
AUDIT_RULE:READ
COMPLIANCE_FAILURE:READ
CONNECTORS:READ
CURRENT_USER_PREFERENCE:CREATE
CURRENT_USER_PREFERENCE:DELETE
CURRENT_USER_PREFERENCE:READ
CURRENT_USER_PREFERENCE:UPDATE
CURRENT_USER_REPORT_SCHEDULE:CREATE
CURRENT_USER_REPORT_SCHEDULE:DELETE
CURRENT_USER_REPORT_SCHEDULE:READ
CURRENT_USER_REPORT_SCHEDULE:UPDATE
CURRENT_USER:READ
CURRENT_USER:UPDATE
CUSTOM_PROFILE:READ
CUSTOMER:READ
DASHBOARD:READ
DESTINATION:READ
EVENT_EXCLUDE_PROFILE:READ
EVENT_RULE:READ
EVENT:READ
EXCEPTION:READ
FEATURE_SET:READ
FIM:READ
FLAG:READ
LOOKUP_TABLE:READ
MALWARE_ACCOUNT:READ
OBJECT_GROUP:READ
OSQUERY:READ
PROFILE:READ
PROMETHEUS_TARGET:READ
QUERY_PACK:READ
QUERY:READ
REGISTRY_PATH:READ
REPORT_RUN:READ
REPORT_SCHEDULE:READ
REPORT:READ
SCHEDULED_GROUP:READ
SCHEDULED_QUERY:READ
SCHEMA:READ
SIGNATURE:READ
TAG_RULE:READ
TAG:READ
THREAT:READ
USER_PREFERENCE:READ
USER_PREFERENCE:UPDATE
USER_ROLE:READ
USER:READ
Related Articles
Provisioning roles through Uptycs portal
Overview Starting with Uptycs portal release 46025, Uptycs provides entity level granular user permissions through roles. Roles can be provisioned / modified by navigating to Roles GUI / API. This document outlines the process to create roles using ...
osqueryd Flags and command line guide
$ sudo osqueryd --help Password: osquery 3.3.2.45-Uptycs, your OS as a high-performance relational database Usage: osqueryd [OPTION]... osquery command line flags: --flagfile PATH Line-delimited file of additional flags --D Run as a daemon process ...
Installing Uptycs osquery on Kubernetes
Copy the your YAML manifest file (uptycs_osq_daemonset_<customer>.yaml) to the kubernetes client machine (a machine with the command: kubectl). 1. Create the daemon set using following command: kubectl create -f ...
Osquery Flag configuration to use HTTP Proxy in Windows assets
Per default configuration,osquery in a windows asset checks, if it can reach to uptycs cloud; before doing an Enrollment request. If it is able to connect, it will continue without using any proxy. If above connection attempt fails, 1) Then osquery ...
Auto tagging using global query
This article provides details on how to create auto tag rules using a global query. Currently, auto tagging using a global query can be achieved using API only. GUI based solution will be available in release 77. Global query based auto tag rules can ...