Maximum Number of Specific Users or Groups for a Custom Rule

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

What is the limit of Specific Users or Groups that can be added to a Custom Rule?

Environment

• App Control Server: All Supported Versions
• App Control Agent: All Supported Versions

Resolution

The User or Group field of a Custom Rule is not limited to a specific quantity, but rather the total byte size of the field as stored in the database. Whether the User or Group is entered as a SID or not, currently the column that information is stored in has a maximum byte size of 2048.

Additional Information

• Security Identifiers (SIDs) have a max length of 256 characters.
• Typically an Active Directory SID has roughly a byte length of 45. This means roughly 45 unique Active Directory SIDs could be entered, before reaching the max size.
• Using a Group where possible is recommended.