Audit and Remediation: Which Admin Role is Used in Live Query

Products

• Carbon Black Cloud Audit and Remediation (formerly Cb Live Ops)

Issue/Introduction

Which Admin Role is Used in Live Query?

Environment

• Carbon Black Cloud Backend: All supported versions
• Carbon Black Cloud Sensor: All supported versions
• Operating Systems: Windows, Mac, Linux

Resolution

• Windows: SYSTEM
• Mac: Root
• Linux: Root

Additional Information

The role used in Live Query could cause the query result to be different from the result got under local user view.