Managed Detection: Can Role-Based Access Control Prevent a User from Viewing a Managed Detection Alert?

Products

• Carbon Black Cloud Managed Detection (formerly Cb Threatsight)

Issue/Introduction

Can Role-Based Access Control (i.e., RBAC) prevent a user from viewing a Managed Detection alert?

Environment

• CBC Web Console: All Versions
• Managed Detection: Optional Add-on Subscription

Resolution

Yes, Managed Detection alerts are emails sent from the Managed Detection team.  If a user on the Managed Detection email distro does not have the appropriate permissions to view an alert within the console then this will prevent the user from viewing the reported data.

Additional Information

• It is assumed that the user has enough permissions to view a Managed Detection alert if added to the Managed Detection email distro.
• To view a Managed Detection alert a user will need to have access to view and manage alerts from within the CBC Web Console.