# Security Operations Manager Role

The Security Operations Manager role allows users to view Dashboards and create reports, view and create custom detectors, work on various Nightfall integrations, handle DLP violations, exfiltration, and Posture Management events, and create and edit policies.&#x20;

The Nightfall app view for a user with this role is as shown in the following image.&#x20;

<figure><img src="/files/b0k4mGWAHFENqdbqGfSK" alt=""><figcaption></figcaption></figure>

## Permissions Associated with Security Operations Manager Role

A user with Security Operations Manager Role has the following permissions.

### View Dashboard and Create Reports

With the **Dashboard** and **Reportin**g permissions, users to view data on the Dashboard, apply filters to the dashboard data, and also generate reports from the Dashboard data.&#x20;

<figure><img src="/files/PdVTaWuVzjJQXfRp9Rbp" alt=""><figcaption></figcaption></figure>

### Take Actions on DLP Violations

With the **DLP Violations** permission, users can take appropriate actions on the DLP violations. They can also share the violation data and export it as a CSV file.

<figure><img src="/files/ILNpC0Cx5fx0HY2aoSBX" alt=""><figcaption></figcaption></figure>

### View the DLP Violations Content&#x20;

With the **Content Preview** permission, users can preview the content of the DLP Violations page. The sensitive data is not redacted for this role.

<figure><img src="/files/10oB5vnBTR0mc883nAfg" alt=""><figcaption></figcaption></figure>

### Exfiltration/Posture Management and Encryption Events

With the **Exfiltration** permission, users can filter event data, share event data, view historic events data, and  take actions on Posture management, Exfiltration, and encryption events.&#x20;

<figure><img src="/files/yxFvGlg4zDC7uh0euLIO" alt=""><figcaption></figcaption></figure>

### Detectors

With the **Detectors** permission, users can view all the detectors, view detectors that belong to a specific category, filter the list of detectors, search a detector, and copy the UUID of a detector. Users with this role can also create custom detectors.

<figure><img src="/files/E2Xbe96jX6xpQe3afuCs" alt=""><figcaption></figcaption></figure>

### Detection Rules

With the **Detection Rules** Permission, users can view and modify detection rules. Furthermore, this permission also allows users to create new detection rule and add detectors to it.&#x20;

<figure><img src="/files/UihMf3GFyL2GKu7EbjNc" alt=""><figcaption></figcaption></figure>

### Policies

The **DLP policies** permission allows users to create, edit, and delete the DLP policies. The **Exfiltration/Posture management** permission allow users to create, edit, and delete the exfiltration, Posture management, and Firewall for AI policies. Users can also search and filter policies.&#x20;

<figure><img src="/files/3sxf6B3awRZ0FNxdhi0a" alt=""><figcaption></figcaption></figure>

### App Management and App Alert Management

With the **App management** permission, users can manage connections to various existing Nightfall integrations and create new instance of connections with Nightfall integrations. With the **App Alert Management** permission, users can add, edit, or delete notification channels for each integration.&#x20;

<figure><img src="/files/L8ytDYfkZIqRiVivwU27" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.nightfall.ai/nightfall_settings/role_based_access_control/security_operations_manager.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
