How Do I Add & Manage New Users? Follow
General
This article outlines details and important aspects of the seven account roles available to you within your Red Canary portal.
Overview
- Roles are additive. You can select multiple roles for a user and the relevant permissions of those roles will add together.
- A common combination of roles for a user who should have full functionality within both the Red Canary portal and the underlying EDR platform are Responder and Analyst.
- Technical Contact and Business Contact roles are limited to one use per portal. A portal user can have both roles, or the roles can be split between two users. Technical Contact will be the go-to for after-hours detection escalations (unless other arrangements have been made with your CSM or via Automate). Business Contact will be used for contract-based questions.
- Analyst Viewer provides read-only access with similar visibility to the Analyst role.
- Users that only have the role of Admin cannot view detections.
- Carbon Black (Cb) Response permissions are only reconciled if user accounts are created and controlled with the Red Canary portal. Customers leveraging Cb Cloud, on-premise Cb Response instances or Single Sign-On are responsible for managing authorization within those platforms.
- Features that a user can access via the Red Canary portal are also accessible via our API.
What can each role do?
Below are two ways to review roles, a chart and a text list.

All Users
- Log in to the Red Canary portal
- Edit their own user profile
- Download sensor installers
- Use the Share a File feature
Comments
0 comments
Please sign in to leave a comment.