Detailed Role Permissions
When deciding whether to use default team roles or create a custom role, it can be helpful to review the RBAC permissions that Sysdig grants to the roles of Standard User, Advanced User, and so on.
This page provides a detailed outline of the permissions granted to the various default roles in Secure and Monitor.
Sysdig Monitor
Standard User
categoryName | categoryDescription | description | action | itemDisplayName | itemDescription |
---|---|---|---|---|---|
Advisor | Manage access to Advisor | Access Advisor | READ | Advisor | OVERVIEWS |
Advisor | Manage access to Advisor | Kubernetes API feature | READ | Kubernetes API | KUBERNETES_API_COMMANDS |
Advisor | Manage access to Advisor | Access Live Logs feature | VIEW | Live Logs | LIVELOGS |
Alerts | Manage access to Alerts | Acknowledge an event triggerred by an alert in the events feed in scope of a team | EDIT | Alert Events | ALERT_EVENTS |
Alerts | Manage access to Alerts | Access the events generated by triggered alerts in scope of a team | READ | Alert Events | ALERT_EVENTS |
Alerts | Manage access to Alerts | Modify alerts in scope of a team | EDIT | Alerts | ALERTS |
Alerts | Manage access to Alerts | Access the alerts in scope of a team | READ | Alerts | ALERTS |
Captures / Investigate | Manage access to Captures / Investigate | Modify captures | EDIT | Captures | CAPTURES |
Captures / Investigate | Manage access to Captures / Investigate | Access captures | READ | Captures | CAPTURES |
Captures / Investigate | Manage access to Captures / Investigate | View captures in the UI | VIEW | Captures | CAPTURES |
Dashboards | Manage access to dashboards | N/A | READ | Dashboard Metrics Data | DASHBOARD_METRICS_DATA |
Dashboards | Manage access to dashboards | Modify dashboards in scope of a team | EDIT | Dashboards | DASHBOARDS |
Dashboards | Manage access to dashboards | Access dashboards in scope of a team | READ | Dashboards | DASHBOARDS |
Data Access Settings | Manage access to Data Settings | Access data stream configuration | READ | Datastream | DATASTREAM |
Data Access Settings | Manage access to Data Settings | Create and edit custom groupings | EDIT | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access default and custom groupings | READ | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access metrics data | READ | Metrics Data | METRICS_DATA |
Data Access Settings | Manage access to Data Settings | Access metrics descriptors | READ | Metrics Descriptors | METRICS_DESCRIPTORS |
Data Access Settings | Manage access to Data Settings | Access Prometheus metrics and labels | READ | PromQL Metadata | PROMQL_METADATA |
Events | Manage access to Events | Acknowledge the infrastructure and other events created by Sysdig Agent or Sysdig API | EDIT | Custom Events | Infrastructure events or events created via API |
Events | Manage access to Events | Access the infrastructure and other events created by Sysdig Agent or Sysdig API | READ | Custom Events | Infrastructure events or events created via API |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands | VIEW | Agent Console | AGENT_CLI |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which access agent status | READ | Agent Console - Agent Status | AGENT_STATUS |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands to view the configuration of the agent which does not contain sensitive information like passwords | VIEW | Agent Console - Configuration | AGENT_CONFIGURATION |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which make network calls to remote pods and endpoints | EXEC | Agent Console - Network Calls | AGENT_REMOTE_NETWORK_CALLS |
Integrations | N/A | Modify custom integrations in spotlight | EDIT | Custom Integrations | Integrations created by the user manually, before the system automatic detection triggered |
Integrations | N/A | Access custom integrations in spotlight | READ | Custom Integrations | Integrations created by the user manually, before the system automatic detection triggered |
Integrations | N/A | Access Helm-renderer component | READ | Helm Renderer | HELM_RENDERER |
Integrations | N/A | View discovered infrastructure | READ | Infrastructure | INFRASTRUCTURE |
Integrations | N/A | View discovered workload integrations | READ | Integrations | INTEGRATIONS |
Integrations | N/A | Change monitoring integration type or status | EDIT | Monitoring Integrations | PROMCAT_INTEGRATIONS |
Integrations | N/A | Access monitoring integration type or status | READ | Monitoring Integrations | PROMCAT_INTEGRATIONS |
Integrations | N/A | Change monitoring integration status to Pending Metrics | VALIDATE | Monitoring Integrations | PROMCAT_INTEGRATIONS |
Integrations | N/A | N/A | READ | Providers | PROVIDERS |
Integrations | N/A | Access spotlight | READ | Spotlight | SPOTLIGHT |
Settings | N/A | Get agent access key (required for agent installation) | READ | Agent Installation | AGENT_INSTALLATION |
Settings | N/A | List alert downtimes for the customer | READ | Alert Downtimes | DOWNTIMES |
Settings | N/A | Reset users API token in scope of a team | EDIT | API Access Token | API_TOKEN |
Settings | N/A | Access users API token in scope of a team | READ | API Access Token | API_TOKEN |
Settings | N/A | View your API token | VIEW | API Access Token | API_TOKEN |
Settings | N/A | Access AWS settings | READ | AWS Settings | AWS_SETTINGS |
Settings | N/A | Access event forwarding configuration | READ | Events Forwarder | EVENTS_FORWARDER |
Settings | N/A | Access global notification channels | READ | Global Notification Channels | GLOBAL_NOTIFICATION_CHANNELS |
Settings | N/A | Access notification channels in scope of a team | READ | Notification Channels | NOTIFICATION_CHANNELS |
Settings | N/A | Access service accounts in scope of a team | READ | Service Accounts | SERVICE_ACCOUNTS |
Settings | N/A | Access customer subscription details | READ | Subscriptions | SUBSCRIPTIONS |
Settings | N/A | View Sysdig storage configuration | READ | Sysdig Storage | SYSDIG_STORAGE |
View Only
Advisor | Manage access to Advisor | Access Advisor | READ | Advisor | OVERVIEWS |
---|---|---|---|---|---|
Advisor | Manage access to Advisor | Kubernetes API feature | READ | Kubernetes API | KUBERNETES_API_COMMANDS |
Advisor | Manage access to Advisor | Access Live Logs feature | VIEW | Live Logs | LIVELOGS |
Alerts | Manage access to Alerts | Access the events generated by triggered alerts in scope of a team | READ | Alert Events | ALERT_EVENTS |
Alerts | Manage access to Alerts | Access the alerts in scope of a team | READ | Alerts | ALERTS |
Captures / Investigate | Manage access to Captures / Investigate | Access captures | READ | Captures | CAPTURES |
Captures / Investigate | Manage access to Captures / Investigate | View captures in the UI | VIEW | Captures | CAPTURES |
Dashboards | Manage access to dashboards | N/A | READ | Dashboard Metrics Data | DASHBOARD_METRICS_DATA |
Dashboards | Manage access to dashboards | Access dashboards in scope of a team | READ | Dashboards | DASHBOARDS |
Data Access Settings | Manage access to Data Settings | Access data stream configuration | READ | Datastream | DATASTREAM |
Data Access Settings | Manage access to Data Settings | Create and edit custom groupings | EDIT | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access default and custom groupings | READ | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access metrics data | READ | Metrics Data | METRICS_DATA |
Data Access Settings | Manage access to Data Settings | Access metrics descriptors | READ | Metrics Descriptors | METRICS_DESCRIPTORS |
Data Access Settings | Manage access to Data Settings | Access Prometheus metrics and labels | READ | PromQL Metadata | PROMQL_METADATA |
Events | Manage access to Events | Access the infrastructure and other events created by Sysdig Agent or Sysdig API | READ | Custom Events | Infrastructure events or events created via API |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands | VIEW | Agent Console | AGENT_CLI |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which access agent status | READ | Agent Console - Agent Status | AGENT_STATUS |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands to view the configuration of the agent which does not contain sensitive information like passwords | VIEW | Agent Console - Configuration | AGENT_CONFIGURATION |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which make network calls to remote pods and endpoints | EXEC | Agent Console - Network Calls | AGENT_REMOTE_NETWORK_CALLS |
Explore / Metrics | Manage access to Explore / Metrics | Metric querying with Explore | READ | Explore | EXPLORE |
Integrations | N/A | Access custom integrations in spotlight | READ | Custom Integrations | Integrations created by the user manually, before the system automatic detection triggered |
Integrations | N/A | N/A | READ | File Storage Config | FILE_STORAGE_CONFIG |
Integrations | N/A | Access Helm-renderer component | READ | Helm Renderer | HELM_RENDERER |
Integrations | N/A | View discovered infrastructure | READ | Infrastructure | INFRASTRUCTURE |
Integrations | N/A | View discovered workload integrations | READ | Integrations | INTEGRATIONS |
Integrations | N/A | Access monitoring integration type or status | READ | Monitoring Integrations | PROMCAT_INTEGRATIONS |
Integrations | N/A | Change monitoring integration status to Pending Metrics | VALIDATE | Monitoring Integrations | PROMCAT_INTEGRATIONS |
Integrations | N/A | N/A | READ | Providers | PROVIDERS |
Integrations | N/A | Access spotlight | READ | Spotlight | SPOTLIGHT |
Settings | N/A | Get agent access key (required for agent installation) | READ | Agent Installation | AGENT_INSTALLATION |
Settings | N/A | List alert downtimes for the customer | READ | Alert Downtimes | DOWNTIMES |
Settings | N/A | Access users API token in scope of a team | READ | API Access Token | API_TOKEN |
Settings | N/A | View your API token | VIEW | API Access Token | API_TOKEN |
Settings | N/A | Access AWS settings | READ | AWS Settings | AWS_SETTINGS |
Settings | N/A | Access event forwarding configuration | READ | Events Forwarder | EVENTS_FORWARDER |
Settings | N/A | Access global notification channels | READ | Global Notification Channels | GLOBAL_NOTIFICATION_CHANNELS |
Settings | N/A | Access notification channels in scope of a team | READ | Notification Channels | NOTIFICATION_CHANNELS |
Settings | N/A | Access service accounts in scope of a team | READ | Service Accounts | SERVICE_ACCOUNTS |
Settings | N/A | Access customer subscription details | READ | Subscriptions | SUBSCRIPTIONS |
Settings | N/A | View Sysdig storage configuration | READ | Sysdig Storage | SYSDIG_STORAGE |
Team Manager
categoryName | categoryDescription | description | action | itemDisplayName | itemDescription |
---|---|---|---|---|---|
Advisor | Manage access to Advisor | Access Advisor | READ | Advisor | OVERVIEWS |
Advisor | Manage access to Advisor | Kubernetes API feature | READ | Kubernetes API | KUBERNETES_API_COMMANDS |
Advisor | Manage access to Advisor | Access Live Logs feature | VIEW | Live Logs | LIVELOGS |
Alerts | Manage access to Alerts | Acknowledge an event triggerred by an alert in the events feed in scope of a team | EDIT | Alert Events | ALERT_EVENTS |
Alerts | Manage access to Alerts | Access the events generated by triggered alerts in scope of a team | READ | Alert Events | ALERT_EVENTS |
Alerts | Manage access to Alerts | Modify alerts in scope of a team | EDIT | Alerts | ALERTS |
Alerts | Manage access to Alerts | Access the alerts in scope of a team | READ | Alerts | ALERTS |
Captures / Investigate | Manage access to Captures / Investigate | Modify captures | EDIT | Captures | CAPTURES |
Captures / Investigate | Manage access to Captures / Investigate | Access captures | READ | Captures | CAPTURES |
Captures / Investigate | Manage access to Captures / Investigate | View captures in the UI | VIEW | Captures | CAPTURES |
Dashboards | Manage access to dashboards | N/A | READ | Dashboard Metrics Data | DASHBOARD_METRICS_DATA |
Dashboards | Manage access to dashboards | Modify dashboards in scope of a team | EDIT | Dashboards | DASHBOARDS |
Dashboards | Manage access to dashboards | Access dashboards in scope of a team | READ | Dashboards | DASHBOARDS |
Data Access Settings | Manage access to Data Settings | Create and edit custom groupings | EDIT | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access default and custom groupings | READ | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access metrics data | READ | Metrics Data | METRICS_DATA |
Data Access Settings | Manage access to Data Settings | Access metrics descriptors | READ | Metrics Descriptors | METRICS_DESCRIPTORS |
Data Access Settings | Manage access to Data Settings | Access Prometheus metrics and labels | READ | PromQL Metadata | PROMQL_METADATA |
Events | Manage access to Events | Acknowledge the infrastructure and other events created by Sysdig Agent or Sysdig API | EDIT | Custom Events | Infrastructure events or events created via API |
Events | Manage access to Events | Access the infrastructure and other events created by Sysdig Agent or Sysdig API | READ | Custom Events | Infrastructure events or events created via API |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands | VIEW | Agent Console | AGENT_CLI |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which access agent status | READ | Agent Console - Agent Status | AGENT_STATUS |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands to view the configuration of the agent which does not contain sensitive information like passwords | VIEW | Agent Console - Configuration | AGENT_CONFIGURATION |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which make network calls to remote pods and endpoints | EXEC | Agent Console - Network Calls | AGENT_REMOTE_NETWORK_CALLS |
Explore / Metrics | Manage access to Explore / Metrics | N/A | EDIT | Explore | EXPLORE |
Explore / Metrics | Manage access to Explore / Metrics | Metric querying with Explore | READ | Explore | EXPLORE |
Explore / Metrics | Manage access to Explore / Metrics | Share metrics grouping with the team | TOGGLE | Shared Groupings with Team | GROUPINGS_TEAM_SHARING |
Integrations | N/A | Modify custom integrations in spotlight | EDIT | Custom Integrations | Integrations created by the user manually, before the system automatic detection triggered |
Integrations | N/A | Access custom integrations in spotlight | READ | Custom Integrations | Integrations created by the user manually, before the system automatic detection triggered |
Integrations | N/A | Access Helm-renderer component | READ | Helm Renderer | HELM_RENDERER |
Integrations | N/A | View discovered infrastructure | READ | Infrastructure | INFRASTRUCTURE |
Integrations | N/A | View discovered workload integrations | READ | Integrations | INTEGRATIONS |
Integrations | N/A | Change monitoring integration type or status | EDIT | Monitoring Integrations | PROMCAT_INTEGRATIONS |
Integrations | N/A | Access monitoring integration type or status | READ | Monitoring Integrations | PROMCAT_INTEGRATIONS |
Integrations | N/A | Change monitoring integration status to Pending Metrics | VALIDATE | Monitoring Integrations | PROMCAT_INTEGRATIONS |
Integrations | N/A | N/A | READ | Providers | PROVIDERS |
Integrations | N/A | Access spotlight | READ | Spotlight | SPOTLIGHT |
Settings | N/A | Get agent access key (required for agent installation) | READ | Agent Installation | AGENT_INSTALLATION |
Settings | N/A | List alert downtimes for the customer | READ | Alert Downtimes | DOWNTIMES |
Settings | N/A | Reset users API token in scope of a team | EDIT | API Access Token | API_TOKEN |
Settings | N/A | Access users API token in scope of a team | READ | API Access Token | API_TOKEN |
Settings | N/A | View your API token | VIEW | API Access Token | API_TOKEN |
Settings | N/A | Access AWS settings | READ | AWS Settings | AWS_SETTINGS |
Settings | N/A | Access event forwarding configuration | READ | Events Forwarder | EVENTS_FORWARDER |
Settings | N/A | Access global notification channels | READ | Global Notification Channels | GLOBAL_NOTIFICATION_CHANNELS |
Settings | N/A | Modify notification channels in scope of a team | EDIT | Notification Channels | NOTIFICATION_CHANNELS |
Settings | N/A | Access notification channels in scope of a team | READ | Notification Channels | NOTIFICATION_CHANNELS |
Settings | N/A | Modify service accounts in scope of a team | EDIT | Service Accounts | SERVICE_ACCOUNTS |
Settings | N/A | Access service accounts in scope of a team | READ | Service Accounts | SERVICE_ACCOUNTS |
Settings | N/A | Access customer subscription details | READ | Subscriptions | SUBSCRIPTIONS |
Settings | N/A | View Sysdig storage configuration | READ | Sysdig Storage | SYSDIG_STORAGE |
Settings | N/A | Modify team settings without the ability to modify team membership for users | MANAGE | Teams | TEAMS |
Advanced User
categoryDescription | description | action | itemDisplayName | itemDescription |
---|---|---|---|---|
Manage access to Advisor | Access Advisor | READ | Advisor | OVERVIEWS |
Manage access to Advisor | Kubernetes API feature | READ | Kubernetes API | KUBERNETES_API_COMMANDS |
Manage access to Advisor | Access Live Logs feature | VIEW | Live Logs | LIVELOGS |
Manage access to Alerts | Acknowledge an event triggerred by an alert in the events feed in scope of a team | EDIT | Alert Events | ALERT_EVENTS |
Manage access to Alerts | Access the events generated by triggered alerts in scope of a team | READ | Alert Events | ALERT_EVENTS |
Manage access to Alerts | Modify alerts in scope of a team | EDIT | Alerts | ALERTS |
Manage access to Alerts | Access the alerts in scope of a team | READ | Alerts | ALERTS |
Manage access to Captures / Investigate | Modify captures | EDIT | Captures | CAPTURES |
Manage access to Captures / Investigate | Access captures | READ | Captures | CAPTURES |
Manage access to Captures / Investigate | View captures in the UI | VIEW | Captures | CAPTURES |
Manage access to dashboards | N/A | READ | Dashboard Metrics Data | DASHBOARD_METRICS_DATA |
Manage access to dashboards | Modify dashboards in scope of a team | EDIT | Dashboards | DASHBOARDS |
Manage access to dashboards | Access dashboards in scope of a team | READ | Dashboards | DASHBOARDS |
Manage access to Data Settings | Create and edit custom groupings | EDIT | Groupings | GROUPINGS |
Manage access to Data Settings | Access default and custom groupings | READ | Groupings | GROUPINGS |
Manage access to Data Settings | Access metrics data | READ | Metrics Data | METRICS_DATA |
Manage access to Data Settings | Access metrics descriptors | READ | Metrics Descriptors | METRICS_DESCRIPTORS |
Manage access to Data Settings | Access Prometheus metrics and labels | READ | PromQL Metadata | PROMQL_METADATA |
Manage access to Events | Acknowledge the infrastructure and other events created by Sysdig Agent or Sysdig API | EDIT | Custom Events | Infrastructure events or events created via API |
Manage access to Events | Access the infrastructure and other events created by Sysdig Agent or Sysdig API | READ | Custom Events | Infrastructure events or events created via API |
Manage access to Explore / Metrics | Use Agent Console commands | VIEW | Agent Console | AGENT_CLI |
Manage access to Explore / Metrics | Use Agent Console commands which access agent status | READ | Agent Console - Agent Status | AGENT_STATUS |
Manage access to Explore / Metrics | Use Agent Console commands to view the configuration of the agent which does not contain sensitive information like passwords | VIEW | Agent Console - Configuration | AGENT_CONFIGURATION |
Manage access to Explore / Metrics | Use Agent Console commands which make network calls to remote pods and endpoints | EXEC | Agent Console - Network Calls | AGENT_REMOTE_NETWORK_CALLS |
Manage access to Explore / Metrics | N/A | EDIT | Explore | EXPLORE |
Manage access to Explore / Metrics | Metric querying with Explore | READ | Explore | EXPLORE |
Manage access to Explore / Metrics | Share metrics grouping with the team | TOGGLE | Shared Groupings with Team | GROUPINGS_TEAM_SHARING |
N/A | Modify custom integrations in spotlight | EDIT | Custom Integrations | Integrations created by the user manually, before the system automatic detection triggered |
N/A | Access custom integrations in spotlight | READ | Custom Integrations | Integrations created by the user manually, before the system automatic detection triggered |
N/A | Access Helm-renderer component | READ | Helm Renderer | HELM_RENDERER |
N/A | View discovered infrastructure | READ | Infrastructure | INFRASTRUCTURE |
N/A | View discovered workload integrations | READ | Integrations | INTEGRATIONS |
N/A | Change monitoring integration type or status | EDIT | Monitoring Integrations | PROMCAT_INTEGRATIONS |
N/A | Access monitoring integration type or status | READ | Monitoring Integrations | PROMCAT_INTEGRATIONS |
N/A | Change monitoring integration status to Pending Metrics | VALIDATE | Monitoring Integrations | PROMCAT_INTEGRATIONS |
N/A | N/A | READ | Providers | PROVIDERS |
N/A | Access spotlight | READ | Spotlight | SPOTLIGHT |
N/A | Get agent access key (required for agent installation) | READ | Agent Installation | AGENT_INSTALLATION |
N/A | List alert downtimes for the customer | READ | Alert Downtimes | DOWNTIMES |
N/A | Reset users API token in scope of a team | EDIT | API Access Token | API_TOKEN |
N/A | Access users API token in scope of a team | READ | API Access Token | API_TOKEN |
N/A | View your API token | VIEW | API Access Token | API_TOKEN |
N/A | Access AWS settings | READ | AWS Settings | AWS_SETTINGS |
N/A | Access event forwarding configuration | READ | Events Forwarder | EVENTS_FORWARDER |
N/A | Access global notification channels | READ | Global Notification Channels | GLOBAL_NOTIFICATION_CHANNELS |
N/A | Modify notification channels in scope of a team | EDIT | Notification Channels | NOTIFICATION_CHANNELS |
N/A | Access notification channels in scope of a team | READ | Notification Channels | NOTIFICATION_CHANNELS |
N/A | Access service accounts in scope of a team | READ | Service Accounts | SERVICE_ACCOUNTS |
N/A | Access customer subscription details | READ | Subscriptions | SUBSCRIPTIONS |
N/A | View Sysdig storage configuration | READ | Sysdig Storage | SYSDIG_STORAGE |
Sysdig Secure Team Roles
Standard User
categoryName | categoryDescription | description | action | itemDisplayName | itemDescription |
---|---|---|---|---|---|
Advisor | Manage access to Advisor | Kubernetes API feature | READ | Kubernetes API | KUBERNETES_API_COMMANDS |
Advisor | Manage access to Advisor | Access Live Logs feature | VIEW | Live Logs | LIVELOGS |
Alerts | Manage access to Alerts | Access the alerts in scope of a team | READ | Alerts | ALERTS |
Captures / Investigate | Manage access to Captures / Investigate | Access captures | READ | Captures | CAPTURES |
Captures / Investigate | Manage access to Captures / Investigate | View captures in the UI | VIEW | Captures | CAPTURES |
Data Access Settings | Manage access to Data Settings | Create and edit custom groupings | EDIT | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access default and custom groupings | READ | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access metrics data | READ | Metrics Data | METRICS_DATA |
Data Access Settings | Manage access to Data Settings | Access metrics descriptors | READ | Metrics Descriptors | METRICS_DESCRIPTORS |
Events | Manage access to Events | Access the infrastructure and other events created by Sysdig Agent or Sysdig API | READ | Custom Events | Infrastructure events or events created via API |
Events | Manage access to Events | Access policy events | READ | Policy Events | POLICY_EVENTS |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands | VIEW | Agent Console | AGENT_CLI |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which access agent status | READ | Agent Console - Agent Status | AGENT_STATUS |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands to view the configuration of the agent which does not contain sensitive information like passwords | VIEW | Agent Console - Configuration | AGENT_CONFIGURATION |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which make network calls to remote pods and endpoints | EXEC | Agent Console - Network Calls | AGENT_REMOTE_NETWORK_CALLS |
Explore / Metrics | Manage access to Explore / Metrics | Metric querying with Explore | READ | Explore | EXPLORE |
Explore / Metrics | Manage access to Explore / Metrics | Share metrics grouping with the team | TOGGLE | Shared Groupings with Team | GROUPINGS_TEAM_SHARING |
Integrations | N/A | Access Helm-renderer component | READ | Helm Renderer | HELM_RENDERER |
Integrations | N/A | View discovered infrastructure | READ | Infrastructure | INFRASTRUCTURE |
Integrations | N/A | Access monitoring integration type or status | READ | Monitoring Integrations | PROMCAT_INTEGRATIONS |
Integrations | N/A | N/A | READ | Providers | PROVIDERS |
Policies | Manage Access to Policies and Zones | View Posture policies | READ | Posture Policies | POSTURE_POLICIES |
Policies | Manage Access to Posture controls | View Posture Controls | READ | Posture Controls | POSTURE_CONTROLS |
Policies | Manage Access to Policies and Zones | View Zones that are assigned to current team | READ | Zones | ZONES |
Posture | Manage Access to Posture Results | Create and modify scheduled Legacy benchmark and compliance tasks | EDIT | Legacy Benchmark Tasks | LEGACY_BENCHMARK_TASKS |
Posture | Manage Access to Posture Results | Access scheduled Legacy benchmark tasks | READ | Legacy Benchmark Tasks | LEGACY_BENCHMARK_TASKS |
Posture | Manage Access to Posture Results | Access Legacy benchmark results | READ | Legacy Benchmarks | LEGACY_BENCHMARKS |
Posture | Manage Access to Posture Results | Access Legacy Compliance tasks and reports | READ | Legacy Compliance | LEGACY_COMPLIANCE |
Posture | Manage Access to Posture Results | Access Compliance results | EDIT | CSPM Compliance | COMPLIANCE_RESULTS |
Posture | N/A | Access CSPM results | READ | CSPM Compliance | CSPM_RESULTS |
Scanning | Manage access to Scanning | Import scanning images | EDIT | Image Import | SECURE_IMPORT_IMAGES |
Scanning | Manage access to Scanning | Read scan results | READ | Scanning | SCANNING |
Scanning | Manage access to Scanning | Access scanning alerts | READ | Scanning Alerts | SECURE_ALERTS |
Scanning | Manage access to Scanning | Create scanning events | CREATE | Scanning Image Results | SECURE_IMAGES |
Scanning | Manage access to Scanning | List scanning images | READ | Scanning Image Results | SECURE_IMAGES |
Scanning | Manage access to Scanning | Query runtime containers API | EDIT | Scanning Runtime | SECURE_QUERY_CONTAINERS |
Scanning | Manage access to Scanning | View and download existing reports | READ | Scanning Scheduled Reports | SECURE_REPORTS |
Scanning | Manage access to Scanning | Access the trusted images list | READ | Scanning Trusted Images | SECURE_WHITELIST_IMAGES |
Scanning | Manage access to Scanning | Access the untrusted images list | READ | Scanning Untrusted Images | SECURE_BLACKLIST_IMAGES |
Scanning | Manage access to Scanning | Access vulnerability exceptions | READ | Scanning Vulnerability Exceptions | SECURE_WHITELIST |
Settings | N/A | Get agent access key (required for agent installation) | READ | Agent Installation | AGENT_INSTALLATION |
Settings | N/A | Reset users API token in scope of a team | EDIT | API Access Token | API_TOKEN |
Settings | N/A | Access users API token in scope of a team | READ | API Access Token | API_TOKEN |
Settings | N/A | View your API token | VIEW | API Access Token | API_TOKEN |
Settings | N/A | Access AWS settings | READ | AWS Settings | AWS_SETTINGS |
Settings | N/A | Access cloud accounts | READ | Cloud Accounts | CLOUD_ACCOUNTS |
Settings | N/A | Access global notification channels | READ | Global Notification Channels | GLOBAL_NOTIFICATION_CHANNELS |
Settings | N/A | Access IAC results | READ | IAC | IAC |
Settings | N/A | Access notification channels in scope of a team | READ | Notification Channels | NOTIFICATION_CHANNELS |
Settings | N/A | Access service accounts in scope of a team | READ | Service Accounts | SERVICE_ACCOUNTS |
Settings | N/A | Access customer subscription details | READ | Subscriptions | SUBSCRIPTIONS |
Settings | N/A | Modify Sysdig Secure configuration | EDIT | Sysdig Secure Settings | SECURE_SETTINGS |
Settings | N/A | View Sysdig storage configuration | READ | Sysdig Storage | SYSDIG_STORAGE |
Service Manager
categoryName | categoryDescription | description | action | itemDisplayName | itemDescription |
---|---|---|---|---|---|
Advisor | Manage access to Advisor | Kubernetes API feature | READ | Kubernetes API | KUBERNETES_API_COMMANDS |
Advisor | Manage access to Advisor | Access Live Logs feature | VIEW | Live Logs | LIVELOGS |
Alerts | Manage access to Alerts | Access the alerts in scope of a team | READ | Alerts | ALERTS |
Captures / Investigate | Manage access to Captures / Investigate | Access captures | READ | Captures | CAPTURES |
Captures / Investigate | Manage access to Captures / Investigate | View captures in the UI | VIEW | Captures | CAPTURES |
Data Access Settings | Manage access to Data Settings | Create and edit custom groupings | EDIT | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access default and custom groupings | READ | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access metrics data | READ | Metrics Data | METRICS_DATA |
Data Access Settings | Manage access to Data Settings | Access metrics descriptors | READ | Metrics Descriptors | METRICS_DESCRIPTORS |
Events | Manage access to Events | Access the infrastructure and other events created by Sysdig Agent or Sysdig API | READ | Custom Events | Infrastructure events or events created via API |
Events | Manage access to Events | Access policy events | READ | Policy Events | POLICY_EVENTS |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands | VIEW | Agent Console | AGENT_CLI |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which access agent status | READ | Agent Console - Agent Status | AGENT_STATUS |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands to view the configuration of the agent which does not contain sensitive information like passwords | VIEW | Agent Console - Configuration | AGENT_CONFIGURATION |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which make network calls to remote pods and endpoints | EXEC | Agent Console - Network Calls | AGENT_REMOTE_NETWORK_CALLS |
Explore / Metrics | Manage access to Explore / Metrics | Metric querying with Explore | READ | Explore | EXPLORE |
Explore / Metrics | Manage access to Explore / Metrics | Share metrics grouping with the team | TOGGLE | Shared Groupings with Team | GROUPINGS_TEAM_SHARING |
Integrations | N/A | Access Helm-renderer component | READ | Helm Renderer | HELM_RENDERER |
Integrations | N/A | View discovered infrastructure | READ | Infrastructure | INFRASTRUCTURE |
Integrations | N/A | Access monitoring integration type or status | READ | Monitoring Integrations | PROMCAT_INTEGRATIONS |
Integrations | N/A | N/A | READ | Providers | PROVIDERS |
Policies | Manage Access to Policies and Zones | View Zones that are assigned to current team | READ | Zones | ZONES |
Policies | Manage Access to Policies and Zones | View Posture policies | READ | Posture Policies | POSTURE_POLICIES |
Policies | Manage Access to Posture controls | View Posture Controls | READ | Posture Controls | POSTURE_CONTROLS |
Posture | Manage Access to Posture Results | Create and modify scheduled Legacy benchmark and compliance tasks | EDIT | Legacy Benchmark Tasks | LEGACY_BENCHMARK_TASKS |
Posture | Manage Access to Posture Results | Access scheduled Legacy benchmark tasks | READ | Legacy Benchmark Tasks | LEGACY_BENCHMARK_TASKS |
Posture | Manage Access to Posture Results | Access Legacy benchmark results | READ | Legacy Benchmarks | LEGACY_BENCHMARKS |
Posture | Manage Access to Posture Results | Access Legacy Compliance tasks and reports | READ | Legacy Compliance | LEGACY_COMPLIANCE |
Posture | Manage Access to Posture Results | Access Compliance results | EDIT | CSPM Compliance | COMPLIANCE_RESULTS |
Posture | N/A | Access CSPM results | READ | CSPM | CSPM_RESULTS |
Scanning | Manage access to Scanning | Import scanning images | EDIT | Image Import | SECURE_IMPORT_IMAGES |
Scanning | Manage access to Scanning | Execute backend scanning | EXEC | Scanning | SCANNING |
Scanning | Manage access to Scanning | Read scan results | READ | Scanning | SCANNING |
Scanning | Manage access to Scanning | Modify scanning alerts and registry credentials | WRITE | Scanning | SCANNING |
Scanning | Manage access to Scanning | Modify scanning alerts | EDIT | Scanning Alerts | SECURE_ALERTS |
Scanning | Manage access to Scanning | Access scanning alerts | READ | Scanning Alerts | SECURE_ALERTS |
Scanning | Manage access to Scanning | Create scanning events | CREATE | Scanning Image Results | SECURE_IMAGES |
Scanning | Manage access to Scanning | List scanning images | READ | Scanning Image Results | SECURE_IMAGES |
Scanning | Manage access to Scanning | Access policy mappings | READ | Scanning Policy Assignments | SECURE_MAPPINGS |
Scanning | Manage access to Scanning | Query runtime containers API | EDIT | Scanning Runtime | SECURE_QUERY_CONTAINERS |
Scanning | Manage access to Scanning | View and download existing reports | READ | Scanning Scheduled Reports | SECURE_REPORTS |
Scanning | Manage access to Scanning | Access the trusted images list | READ | Scanning Trusted Images | SECURE_WHITELIST_IMAGES |
Scanning | Manage access to Scanning | Access the untrusted images list | READ | Scanning Untrusted Images | SECURE_BLACKLIST_IMAGES |
Scanning | Manage access to Scanning | Access vulnerability exceptions | READ | Scanning Vulnerability Exceptions | SECURE_WHITELIST |
Settings | N/A | Get agent access key (required for agent installation) | READ | Agent Installation | AGENT_INSTALLATION |
Settings | N/A | Reset users API token in scope of a team | EDIT | API Access Token | API_TOKEN |
Settings | N/A | Access users API token in scope of a team | READ | API Access Token | API_TOKEN |
Settings | N/A | View your API token | VIEW | API Access Token | API_TOKEN |
Settings | N/A | Access AWS settings | READ | AWS Settings | AWS_SETTINGS |
Settings | N/A | Access cloud accounts | READ | Cloud Accounts | CLOUD_ACCOUNTS |
Settings | N/A | Access global notification channels | READ | Global Notification Channels | GLOBAL_NOTIFICATION_CHANNELS |
Settings | N/A | Access IAC results | READ | IAC | IAC |
Settings | N/A | Modify notification channels in scope of a team | EDIT | Notification Channels | NOTIFICATION_CHANNELS |
Settings | N/A | Access notification channels in scope of a team | READ | Notification Channels | NOTIFICATION_CHANNELS |
Settings | N/A | Access service accounts in scope of a team | READ | Service Accounts | SERVICE_ACCOUNTS |
Settings | N/A | Access customer subscription details | READ | Subscriptions | SUBSCRIPTIONS |
Settings | N/A | Modify Sysdig Secure configuration | EDIT | Sysdig Secure Settings | SECURE_SETTINGS |
Settings | N/A | View Sysdig storage configuration | READ | Sysdig Storage | SYSDIG_STORAGE |
Settings | N/A | Invite other users to the teams | EDIT | Team Membership | TEAM_MEMBERSHIP |
Settings | N/A | Access team members | READ | Team Membership | TEAM_MEMBERSHIP |
Settings | N/A | Modify team members roles | EDIT | Team Membership Roles | TEAM_MEMBERSHIP_ROLE |
Settings | N/A | Modify team settings without the ability to modify team membership for users | MANAGE | Teams | TEAMS |
Settings | N/A | N/A | READ | Teams | TEAMS |
Settings | N/A | Access existing users data | READ | Users | USERS |
View Only
categoryName | categoryDescription | description | action | itemDisplayName | itemDescription |
---|---|---|---|---|---|
Advisor | Manage access to Advisor | Kubernetes API feature | READ | Kubernetes API | KUBERNETES_API_COMMANDS |
Advisor | Manage access to Advisor | Access Live Logs feature | VIEW | Live Logs | LIVELOGS |
Alerts | Manage access to Alerts | Access the alerts in scope of a team | READ | Alerts | ALERTS |
Captures / Investigate | Manage access to Captures / Investigate | Access activity audit commands | READ | Activity Audit Commands | COMMANDS |
Captures / Investigate | Manage access to Captures / Investigate | Access captures | READ | Captures | CAPTURES |
Captures / Investigate | Manage access to Captures / Investigate | View captures in the UI | VIEW | Captures | CAPTURES |
Data Access Settings | Manage access to Data Settings | Create and edit custom groupings | EDIT | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access default and custom groupings | READ | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access metrics data | READ | Metrics Data | METRICS_DATA |
Data Access Settings | Manage access to Data Settings | Access metrics descriptors | READ | Metrics Descriptors | METRICS_DESCRIPTORS |
Events | Manage access to Events | Access the infrastructure and other events created by Sysdig Agent or Sysdig API | READ | Custom Events | Infrastructure events or events created via API |
Events | Manage access to Events | Access policy events | READ | Policy Events | POLICY_EVENTS |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands | VIEW | Agent Console | AGENT_CLI |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which access agent status | READ | Agent Console - Agent Status | AGENT_STATUS |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands to view the configuration of the agent which does not contain sensitive information like passwords | VIEW | Agent Console - Configuration | AGENT_CONFIGURATION |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which make network calls to remote pods and endpoints | EXEC | Agent Console - Network Calls | AGENT_REMOTE_NETWORK_CALLS |
Explore / Metrics | Manage access to Explore / Metrics | Metric querying with Explore | READ | Explore | EXPLORE |
Integrations | N/A | Access Helm-renderer component | READ | Helm Renderer | HELM_RENDERER |
Integrations | N/A | View discovered infrastructure | READ | Infrastructure | INFRASTRUCTURE |
Integrations | N/A | Access monitoring integration type or status | READ | Monitoring Integrations | PROMCAT_INTEGRATIONS |
Integrations | N/A | N/A | READ | Providers | PROVIDERS |
INTERNAL_UNCATEGORIZED | INTERNAL_UNCATEGORIZED | N/A | READ | Audit Policies | SECURE_AUDIT_POLICIES |
Network Security | N/A | Access Kubernetes Network Security policy advisor | READ | Network Security | NETSEC |
Policies | Manage Access to Policies and Zones | View Zones that are assigned to current team | READ | Zones | ZONES |
Policies | Manage Access to Policies and Zones | View Posture policies | READ | Posture Policies | POSTURE_POLICIES |
Policies | Manage Access to Posture controls | View Posture Controls | READ | Posture Controls | POSTURE_CONTROLS |
Policies | N/A | View existing image profiles | READ | Image profiling | PROFILING |
Policies | N/A | Access policies | READ | Policies | POLICIES |
Policies | N/A | Read PSP advisor simulations | READ | Policy Advisor | PADVISOR |
Posture | Manage Access to Posture Results | Create and modify scheduled Legacy benchmark and compliance tasks | EDIT | Legacy Benchmark Tasks | LEGACY_BENCHMARK_TASKS |
Posture | Manage Access to Posture Results | Access scheduled Legacy benchmark tasks | READ | Legacy Benchmark Tasks | LEGACY_BENCHMARK_TASKS |
Posture | Manage Access to Posture Results | Access Legacy benchmark results | READ | Legacy Benchmarks | LEGACY_BENCHMARKS |
Posture | Manage Access to Posture Results | Access Legacy Compliance tasks and reports | READ | Legacy Compliance | LEGACY_COMPLIANCE |
Posture | Manage Access to Posture Results | Access Compliance results | EDIT | CSPM Compliance | COMPLIANCE_RESULTS |
Posture | N/A | Access scheduled benchmark taks | READ | Benchmark Tasks | BENCHMARK_TASKS |
Posture | N/A | Access legacy benchmark results | READ | Legacy Benchmarks | BENCHMARKS |
Posture | N/A | Access Compliance tasks and reports | READ | Compliance | COMPLIANCE |
Posture | N/A | Access CSPM results | READ | CSPM | CSPM_RESULTS |
Scanning | Manage access to Scanning | Read scan results | READ | Scanning | SCANNING |
Scanning | Manage access to Scanning | Access scanning alerts | READ | Scanning Alerts | SECURE_ALERTS |
Scanning | Manage access to Scanning | List scanning images | READ | Scanning Image Results | SECURE_IMAGES |
Scanning | Manage access to Scanning | Access security policies | READ | Scanning Policies | SECURE_POLICY |
Scanning | Manage access to Scanning | Access policy mappings | READ | Scanning Policy Assignments | SECURE_MAPPINGS |
Scanning | Manage access to Scanning | List container registries | READ | Scanning Registry Credentials | SECURE_REGISTRY |
Scanning | Manage access to Scanning | Query runtime containers API | EDIT | Scanning Runtime | SECURE_QUERY_CONTAINERS |
Scanning | Manage access to Scanning | View and download existing reports | READ | Scanning Scheduled Reports | SECURE_REPORTS |
Scanning | Manage access to Scanning | Access the trusted images list | READ | Scanning Trusted Images | SECURE_WHITELIST_IMAGES |
Scanning | Manage access to Scanning | Access the untrusted images list | READ | Scanning Untrusted Images | SECURE_BLACKLIST_IMAGES |
Scanning | Manage access to Scanning | Access vulnerability exceptions | READ | Scanning Vulnerability Exceptions | SECURE_WHITELIST |
Settings | N/A | Get agent access key (required for agent installation) | READ | Agent Installation | AGENT_INSTALLATION |
Settings | N/A | Reset users API token in scope of a team | EDIT | API Access Token | API_TOKEN |
Settings | N/A | Access users API token in scope of a team | READ | API Access Token | API_TOKEN |
Settings | N/A | View your API token | VIEW | API Access Token | API_TOKEN |
Settings | N/A | Access AWS settings | READ | AWS Settings | AWS_SETTINGS |
Settings | N/A | Access cloud accounts | READ | Cloud Accounts | CLOUD_ACCOUNTS |
Settings | N/A | Access global notification channels | READ | Global Notification Channels | GLOBAL_NOTIFICATION_CHANNELS |
Settings | N/A | Access IAC results | READ | IAC | IAC |
Settings | N/A | Access notification channels in scope of a team | READ | Notification Channels | NOTIFICATION_CHANNELS |
Settings | N/A | Access service accounts in scope of a team | READ | Service Accounts | SERVICE_ACCOUNTS |
Settings | N/A | Access customer subscription details | READ | Subscriptions | SUBSCRIPTIONS |
Settings | N/A | Modify Sysdig Secure configuration | EDIT | Sysdig Secure Settings | SECURE_SETTINGS |
Settings | N/A | View Sysdig storage configuration | READ | Sysdig Storage | SYSDIG_STORAGE |
Team Manager
categoryName | categoryDescription | description | action | itemDisplayName | itemDescription |
---|---|---|---|---|---|
Advisor | Manage access to Advisor | Kubernetes API feature | READ | Kubernetes API | KUBERNETES_API_COMMANDS |
Advisor | Manage access to Advisor | Access Live Logs feature | VIEW | Live Logs | LIVELOGS |
Alerts | Manage access to Alerts | Modify alerts in scope of a team | EDIT | Alerts | ALERTS |
Alerts | Manage access to Alerts | Access the alerts in scope of a team | READ | Alerts | ALERTS |
Captures / Investigate | Manage access to Captures / Investigate | Access activity audit commands | READ | Activity Audit Commands | COMMANDS |
Captures / Investigate | Manage access to Captures / Investigate | Modify captures | EDIT | Captures | CAPTURES |
Captures / Investigate | Manage access to Captures / Investigate | Access captures | READ | Captures | CAPTURES |
Captures / Investigate | Manage access to Captures / Investigate | View captures in the UI | VIEW | Captures | CAPTURES |
Captures / Investigate | Manage access to Captures / Investigate | Use rapid response | EXEC | Rapid Response | RAPID_RESPONSE |
Data Access Settings | Manage access to Data Settings | Access data stream configuration | READ | Datastream | DATASTREAM |
Data Access Settings | Manage access to Data Settings | Create and edit custom groupings | EDIT | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access default and custom groupings | READ | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access metrics data | READ | Metrics Data | METRICS_DATA |
Data Access Settings | Manage access to Data Settings | Access metrics descriptors | READ | Metrics Descriptors | METRICS_DESCRIPTORS |
Events | Manage access to Events | Access the infrastructure and other events created by Sysdig Agent or Sysdig API | READ | Custom Events | Infrastructure events or events created via API |
Events | Manage access to Events | Access policy events | READ | Policy Events | POLICY_EVENTS |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands | VIEW | Agent Console | AGENT_CLI |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which access agent status | READ | Agent Console - Agent Status | AGENT_STATUS |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands to view the configuration of the agent which does not contain sensitive information like passwords | VIEW | Agent Console - Configuration | AGENT_CONFIGURATION |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which make network calls to remote pods and endpoints | EXEC | Agent Console - Network Calls | AGENT_REMOTE_NETWORK_CALLS |
Explore / Metrics | Manage access to Explore / Metrics | N/A | EDIT | Explore | EXPLORE |
Explore / Metrics | Manage access to Explore / Metrics | Metric querying with Explore | READ | Explore | EXPLORE |
Explore / Metrics | Manage access to Explore / Metrics | Share metrics grouping with the team | TOGGLE | Shared Groupings with Team | GROUPINGS_TEAM_SHARING |
Integrations | N/A | Access Helm-renderer component | READ | Helm Renderer | HELM_RENDERER |
Integrations | N/A | View discovered infrastructure | READ | Infrastructure | INFRASTRUCTURE |
Integrations | N/A | Access monitoring integration type or status | READ | Monitoring Integrations | PROMCAT_INTEGRATIONS |
Integrations | N/A | N/A | READ | Providers | PROVIDERS |
INTERNAL_UNCATEGORIZED | INTERNAL_UNCATEGORIZED | N/A | READ | Audit Policies | SECURE_AUDIT_POLICIES |
Network Security | N/A | Access Kubernetes Network Security policy advisor | READ | Network Security | NETSEC |
Policies | N/A | Execute image profiling | EXEC | Image profiling | PROFILING |
Policies | N/A | View existing image profiles | READ | Image profiling | PROFILING |
Policies | N/A | Write image profiles | WRITE | Image profiling | PROFILING |
Policies | N/A | Modify policies | EDIT | Policies | POLICIES |
Policies | N/A | Access policies | READ | Policies | POLICIES |
Policies | N/A | Execute PSP advisor simulation | EXEC | Policy Advisor | PADVISOR |
Policies | N/A | Read PSP advisor simulations | READ | Policy Advisor | PADVISOR |
Policies | N/A | Create PSP advisor simulation | WRITE | Policy Advisor | PADVISOR |
Policies | Manage Access to Policies and Zones | View and Edit All Zones | EDIT | Zones | ZONESZONES |
Policies | Manage Access to Policies and Zones | View and Edit Posture policies | EDIT | Posture Policies | POSTURE_POLICIES |
Policies | Manage Access to Posture controls | View and Edit Posture Controls | EDIT | Posture Controls | POSTURE_CONTROLS |
Posture | Manage Access to Posture Results | Create and modify scheduled Legacy benchmark and compliance tasks | EDIT | Legacy Benchmark Tasks | LEGACY_BENCHMARK_TASKS |
Posture | Manage Access to Posture Results | Access scheduled Legacy benchmark tasks | READ | Legacy Benchmark Tasks | LEGACY_BENCHMARK_TASKS |
Posture | Manage Access to Posture Results | Access Legacy benchmark results | READ | Legacy Benchmarks | LEGACY_BENCHMARKS |
Posture | Manage Access to Posture Results | Access Legacy Compliance tasks and reports | READ | Legacy Compliance | LEGACY_COMPLIANCE |
Posture | Manage Access to Posture Results | Access Compliance results | EDIT | CSPM Compliance | COMPLIANCE_RESULTS |
Posture | N/A | Create and modify scheduled benchmark adn compliance tasks | EDIT | Benchmark Tasks | BENCHMARK_TASKS |
Posture | N/A | Access scheduled benchmark taks | READ | Benchmark Tasks | BENCHMARK_TASKS |
Posture | N/A | Access benchmark results | READ | Legacy Benchmarks | BENCHMARKS |
Posture | N/A | Access Legacy Compliance tasks and reports | READ | Legacy Compliance | COMPLIANCE |
Posture | N/A | Access CSPM results | READ | CSPM Compliance | CSPM_RESULTS |
Scanning | Manage access to Scanning | Import scanning images | EDIT | Image Import | SECURE_IMPORT_IMAGES |
Scanning | Manage access to Scanning | Execute backend scanning | EXEC | Scanning | SCANNING |
Scanning | Manage access to Scanning | Read scan results | READ | Scanning | SCANNING |
Scanning | Manage access to Scanning | Modify scanning alerts and registry credentials | WRITE | Scanning | SCANNING |
Scanning | Manage access to Scanning | Modify scanning alerts | EDIT | Scanning Alerts | SECURE_ALERTS |
Scanning | Manage access to Scanning | Access scanning alerts | READ | Scanning Alerts | SECURE_ALERTS |
Scanning | Manage access to Scanning | Create scanning events | CREATE | Scanning Image Results | SECURE_IMAGES |
Scanning | Manage access to Scanning | List scanning images | READ | Scanning Image Results | SECURE_IMAGES |
Scanning | Manage access to Scanning | Modify security policies | EDIT | Scanning Policies | SECURE_POLICY |
Scanning | Manage access to Scanning | Access security policies | READ | Scanning Policies | SECURE_POLICY |
Scanning | Manage access to Scanning | Create and modify policy mappings | EDIT | Scanning Policy Assignments | SECURE_MAPPINGS |
Scanning | Manage access to Scanning | Access policy mappings | READ | Scanning Policy Assignments | SECURE_MAPPINGS |
Scanning | Manage access to Scanning | Create and modify container registries configuration | EDIT | Scanning Registry Credentials | SECURE_REGISTRY |
Scanning | Manage access to Scanning | List container registries | READ | Scanning Registry Credentials | SECURE_REGISTRY |
Scanning | Manage access to Scanning | Query runtime containers API | EDIT | Scanning Runtime | SECURE_QUERY_CONTAINERS |
Scanning | Manage access to Scanning | Create and modify reports | EDIT | Scanning Scheduled Reports | SECURE_REPORTS |
Scanning | Manage access to Scanning | View and download existing reports | READ | Scanning Scheduled Reports | SECURE_REPORTS |
Scanning | Manage access to Scanning | Modify the trusted images list | EDIT | Scanning Trusted Images | SECURE_WHITELIST_IMAGES |
Scanning | Manage access to Scanning | Access the trusted images list | READ | Scanning Trusted Images | SECURE_WHITELIST_IMAGES |
Scanning | Manage access to Scanning | Modify the untrusted images list | EDIT | Scanning Untrusted Images | SECURE_BLACKLIST_IMAGES |
Scanning | Manage access to Scanning | Access the untrusted images list | READ | Scanning Untrusted Images | SECURE_BLACKLIST_IMAGES |
Scanning | Manage access to Scanning | Edit vulnerability exceptions | EDIT | Scanning Vulnerability Exceptions | SECURE_WHITELIST |
Scanning | Manage access to Scanning | Access vulnerability exceptions | READ | Scanning Vulnerability Exceptions | SECURE_WHITELIST |
Settings | N/A | Get agent access key (required for agent installation) | READ | Agent Installation | AGENT_INSTALLATION |
Settings | N/A | Reset users API token in scope of a team | EDIT | API Access Token | API_TOKEN |
Settings | N/A | Access users API token in scope of a team | READ | API Access Token | API_TOKEN |
Settings | N/A | View your API token | VIEW | API Access Token | API_TOKEN |
Settings | N/A | Access AWS settings | READ | AWS Settings | AWS_SETTINGS |
Settings | N/A | Access cloud accounts | READ | Cloud Accounts | CLOUD_ACCOUNTS |
Settings | N/A | Access global notification channels | READ | Global Notification Channels | GLOBAL_NOTIFICATION_CHANNELS |
Settings | N/A | Access IAC results | READ | IAC | IAC |
Settings | N/A | Modify notification channels in scope of a team | EDIT | Notification Channels | NOTIFICATION_CHANNELS |
Settings | N/A | Access notification channels in scope of a team | READ | Notification Channels | NOTIFICATION_CHANNELS |
Settings | N/A | Modify service accounts in scope of a team | EDIT | Service Accounts | SERVICE_ACCOUNTS |
Settings | N/A | Access service accounts in scope of a team | READ | Service Accounts | SERVICE_ACCOUNTS |
Settings | N/A | Access customer subscription details | READ | Subscriptions | SUBSCRIPTIONS |
Settings | N/A | Modify Sysdig Secure configuration | EDIT | Sysdig Secure Settings | SECURE_SETTINGS |
Settings | N/A | View Sysdig storage configuration | READ | Sysdig Storage | SYSDIG_STORAGE |
Settings | N/A | Modify team settings without the ability to modify team membership for users | MANAGE | Teams | TEAMS |
Advanced User
categoryName | categoryDescription | description | action | itemDisplayName | itemDescription |
---|---|---|---|---|---|
Advisor | Manage access to Advisor | Kubernetes API feature | READ | Kubernetes API | KUBERNETES_API_COMMANDS |
Advisor | Manage access to Advisor | Access Live Logs feature | VIEW | Live Logs | LIVELOGS |
Alerts | Manage access to Alerts | Modify alerts in scope of a team | EDIT | Alerts | ALERTS |
Alerts | Manage access to Alerts | Access the alerts in scope of a team | READ | Alerts | ALERTS |
Captures / Investigate | Manage access to Captures / Investigate | Access activity audit commands | READ | Activity Audit Commands | COMMANDS |
Captures / Investigate | Manage access to Captures / Investigate | Modify captures | EDIT | Captures | CAPTURES |
Captures / Investigate | Manage access to Captures / Investigate | Access captures | READ | Captures | CAPTURES |
Captures / Investigate | Manage access to Captures / Investigate | View captures in the UI | VIEW | Captures | CAPTURES |
Captures / Investigate | Manage access to Captures / Investigate | Use rapid response | EXEC | Rapid Response | RAPID_RESPONSE |
Data Access Settings | Manage access to Data Settings | Access data stream configuration | READ | Datastream | DATASTREAM |
Data Access Settings | Manage access to Data Settings | Create and edit custom groupings | EDIT | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access default and custom groupings | READ | Groupings | GROUPINGS |
Data Access Settings | Manage access to Data Settings | Access metrics data | READ | Metrics Data | METRICS_DATA |
Data Access Settings | Manage access to Data Settings | Access metrics descriptors | READ | Metrics Descriptors | METRICS_DESCRIPTORS |
Events | Manage access to Events | Access the infrastructure and other events created by Sysdig Agent or Sysdig API | READ | Custom Events | Infrastructure events or events created via API |
Events | Manage access to Events | Access policy events | READ | Policy Events | POLICY_EVENTS |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands | VIEW | Agent Console | AGENT_CLI |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which access agent status | READ | Agent Console - Agent Status | AGENT_STATUS |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands to view the configuration of the agent which does not contain sensitive information like passwords | VIEW | Agent Console - Configuration | AGENT_CONFIGURATION |
Explore / Metrics | Manage access to Explore / Metrics | Use Agent Console commands which make network calls to remote pods and endpoints | EXEC | Agent Console - Network Calls | AGENT_REMOTE_NETWORK_CALLS |
Explore / Metrics | Manage access to Explore / Metrics | N/A | EDIT | Explore | EXPLORE |
Explore / Metrics | Manage access to Explore / Metrics | Metric querying with Explore | READ | Explore | EXPLORE |
Explore / Metrics | Manage access to Explore / Metrics | Share metrics grouping with the team | TOGGLE | Shared Groupings with Team | GROUPINGS_TEAM_SHARING |
Integrations | N/A | Access Helm-renderer component | READ | Helm Renderer | HELM_RENDERER |
Integrations | N/A | View discovered infrastructure | READ | Infrastructure | INFRASTRUCTURE |
Integrations | N/A | Access monitoring integration type or status | READ | Monitoring Integrations | PROMCAT_INTEGRATIONS |
Integrations | N/A | N/A | READ | Providers | PROVIDERS |
Network Security | N/A | Access Kubernetes Network Security policy advisor | READ | Network Security | NETSEC |
Policies | Manage Access to Policies and Zones | View and Edit Zones that are assigned to current team | EDIT | Zones | ZONES |
Policies | Manage Access to Posture controls | View and Edit Posture Controls | EDIT | Posture Controls | POSTURE_CONTROLS |
Policies | N/A | Execute image profiling | EXEC | Image profiling | PROFILING |
Policies | N/A | View existing image profiles | READ | Image profiling | PROFILING |
Policies | N/A | Write image profiles | WRITE | Image profiling | PROFILING |
Policies | N/A | Modify policies | EDIT | Policies | POLICIES |
Policies | N/A | Access policies | READ | Policies | POLICIES |
Policies | N/A | Execute PSP advisor simulation | EXEC | Policy Advisor | PADVISOR |
Policies | N/A | Read PSP advisor simulations | READ | Policy Advisor | PADVISOR |
Policies | N/A | Create PSP advisor simulation | WRITE | Policy Advisor | PADVISOR |
Posture | N/A | Create and modify scheduled benchmark adn compliance tasks | EDIT | Legacy Benchmark Tasks | BENCHMARK_TASKS |
Posture | N/A | Access scheduled benchmark taks | READ | Legacy Benchmark Tasks | BENCHMARK_TASKS |
Posture | N/A | Access benchmark results | READ | Legacy Benchmarks | BENCHMARKS |
Posture | N/A | Access Compliance tasks and reports | READ | Compliance | COMPLIANCE |
Posture | N/A | Access CSPM results | READ | CSPM | CSPM_RESULTS |
Scanning | Manage access to Scanning | Import scanning images | EDIT | Image Import | SECURE_IMPORT_IMAGES |
Scanning | Manage access to Scanning | Execute backend scanning | EXEC | Scanning | SCANNING |
Scanning | Manage access to Scanning | Read scan results | READ | Scanning | SCANNING |
Scanning | Manage access to Scanning | Modify scanning alerts and registry credentials | WRITE | Scanning | SCANNING |
Scanning | Manage access to Scanning | Modify scanning alerts | EDIT | Scanning Alerts | SECURE_ALERTS |
Scanning | Manage access to Scanning | Access scanning alerts | READ | Scanning Alerts | SECURE_ALERTS |
Scanning | Manage access to Scanning | Create scanning events | CREATE | Scanning Image Results | SECURE_IMAGES |
Scanning | Manage access to Scanning | List scanning images | READ | Scanning Image Results | SECURE_IMAGES |
Scanning | Manage access to Scanning | Modify security policies | EDIT | Scanning Policies | SECURE_POLICY |
Scanning | Manage access to Scanning | Access security policies | READ | Scanning Policies | SECURE_POLICY |
Scanning | Manage access to Scanning | Create and modify policy mappings | EDIT | Scanning Policy Assignments | SECURE_MAPPINGS |
Scanning | Manage access to Scanning | Access policy mappings | READ | Scanning Policy Assignments | SECURE_MAPPINGS |
Scanning | Manage access to Scanning | Create and modify container registries configuration | EDIT | Scanning Registry Credentials | SECURE_REGISTRY |
Scanning | Manage access to Scanning | List container registries | READ | Scanning Registry Credentials | SECURE_REGISTRY |
Scanning | Manage access to Scanning | Query runtime containers API | EDIT | Scanning Runtime | SECURE_QUERY_CONTAINERS |
Scanning | Manage access to Scanning | Create and modify reports | EDIT | Scanning Scheduled Reports | SECURE_REPORTS |
Scanning | Manage access to Scanning | View and download existing reports | READ | Scanning Scheduled Reports | SECURE_REPORTS |
Scanning | Manage access to Scanning | Modify the trusted images list | EDIT | Scanning Trusted Images | SECURE_WHITELIST_IMAGES |
Scanning | Manage access to Scanning | Access the trusted images list | READ | Scanning Trusted Images | SECURE_WHITELIST_IMAGES |
Scanning | Manage access to Scanning | Modify the untrusted images list | EDIT | Scanning Untrusted Images | SECURE_BLACKLIST_IMAGES |
Scanning | Manage access to Scanning | Access the untrusted images list | READ | Scanning Untrusted Images | SECURE_BLACKLIST_IMAGES |
Scanning | Manage access to Scanning | Edit vulnerability exceptions | EDIT | Scanning Vulnerability Exceptions | SECURE_WHITELIST |
Scanning | Manage access to Scanning | Access vulnerability exceptions | READ | Scanning Vulnerability Exceptions | SECURE_WHITELIST |
Settings | N/A | Get agent access key (required for agent installation) | READ | Agent Installation | AGENT_INSTALLATION |
Settings | N/A | Reset users API token in scope of a team | EDIT | API Access Token | API_TOKEN |
Settings | N/A | Access users API token in scope of a team | READ | API Access Token | API_TOKEN |
Settings | N/A | View your API token | VIEW | API Access Token | API_TOKEN |
Settings | N/A | Access AWS settings | READ | AWS Settings | AWS_SETTINGS |
Settings | N/A | Access cloud accounts | READ | Cloud Accounts | CLOUD_ACCOUNTS |
Settings | N/A | Access global notification channels | READ | Global Notification Channels | GLOBAL_NOTIFICATION_CHANNELS |
Settings | N/A | Access IAC results | READ | IAC | IAC |
Settings | N/A | Modify notification channels in scope of a team | EDIT | Notification Channels | NOTIFICATION_CHANNELS |
Settings | N/A | Access notification channels in scope of a team | READ | Notification Channels | NOTIFICATION_CHANNELS |
Settings | N/A | Access service accounts in scope of a team | READ | Service Accounts | SERVICE_ACCOUNTS |
Settings | N/A | Access customer subscription details | READ | Subscriptions | SUBSCRIPTIONS |
Settings | N/A | Modify Sysdig Secure configuration | EDIT | Sysdig Secure Settings | SECURE_SETTINGS |
Settings | N/A | View Sysdig storage configuration | READ | Sysdig Storage | SYSDIG_STORAGE |
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.