EDR: How to disable access for Viewer Role User to Process Search?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to disable access for Viewer Role User to Process Search?

Environment

• EDR(Formerly Carbon Black Response) Server: All Supported Versions

Resolution

• It is not possible under current functionality to disable Process Search access to Viewer User Role.
• As per the User Guide for Process Search:

Viewer and Analyst: Can view process search results for sensor groups for which the user has at least Viewer access.