CB Response: On 6.2.4 Viewer has no read access to Threat Intelligence
book
Article ID: 290635
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
According to Page 74 of 6.2.4 User Guide, Viewer has read access to Threat Intelligence page. But currently, the icon of that page doesn't show up when logging in as a Viewer.
Environment
CB Response Server: 6.2.4
Cause
Documentation error.
Resolution
Viewer roles should have no access to the Threat Intelligence page.
The Threat Intel page will only appear in the navigation menu if a user is listed as an Analyst for at least one Sensor Group. To workaround, if create a sensor group with no sensor in it. Assign analyst access to this group to the viewer user. Then the viewer user can view Threat Intelligence page and reports.