Role Based Access Control (RBAC)

Learn how the role based access control(RBAC) works in Nightfall.

Role Based access control (RBAC) streamlines permissions to various resources within the Nightfall console. There are two key components of RBAC within Nightfall - roles and permissions.

A role is a collection of pre-defined permissions that can be assigned to user accounts within Nightfall. Default roles cannot be edited. A role can be assigned to more than one user account whereas an user account can only have one role. Permissions refer to the specific create, read, update, and delete actions you can take on resources such as policies, events, apps, etc within Nightfall.

Accessing the Users and Roles Page

To access the Users and Roles page:

1. Click Settings from the left menu.

1. Click the Users & roles tab.

You can view the list of Users and the roles assigned to each user.

Click the Roles tab to access the Roles page.

The Roles page displays the Role name, Permissions assigned to a role and the number of users to whom the role is assigned, as shown in the following image.

You can click the View permission details button to expand the complete list of permissions associated with a Role.

Currently, you can only a maximum of one role to a user. Also, you cannot create custom Roles and must use the out of the box Roles provided by Nightfall.

Roles and Permissions

Nightfall provides you with five Roles. Each of the five Roles is associated with multiple permissions. The following table lists each role and the permissions associated with the Role.

Role	Permissions
Security Analyst	Exfiltration Events Content Preview Dashboard Detectors DLP Violations Reporting Encryption Events
Policy Manager	App Alert Management Detectors DLP Policies Detection Rules App Management Exfiltration/Posture Policies Encryption Polices
Security Events Manager	Exfiltration Events Content Preview Dashboard Detectors DLP Violations Reporting Encryption Events
Security Operations Manager	Exfiltration Events Content Preview Detection Rules Dashboard Encryption events Detectors DLP Policies DLP Violations App Alert Management Reporting Encryption policies App Management Exfiltration/Posture Policies
System Administrator	Billing Exfiltration Events Content Preview Detection Rules User Management Dashboard Encryption events Detectors DLP Policies Alert Service DLP Violations App Alert Management Directory Sync Reporting Encryption Policies App Management Exfiltration/Posture Policies API Keys

You can learn more about each of the role from the following links.

Security Analyst Role

Policy Manager Role

Security Events Manager Role

Security Operations Manager Role

System Administrator Role