You must set access rights for every user of Kaspersky Security Center Web Console or Kaspersky Security Center Cloud Console who will use MDR functions in Kaspersky Security Center. Access rights depend on the actions that you want users to be able to perform.
You can create MDR roles with predefined access rights automatically by clicking the link in the first step on the Getting Started tab of MDR section in Kaspersky Security Center.
To set access rights:
Permits users to configure interaction between Kaspersky Security Center and another Kaspersky application or solution.
It is required to set the Allow access right for the Application Integration functional area for users who manage MDR Plug-in. This access right grants users rights to activate, configure, use, and terminate the use of Kaspersky Managed Detection and Response.
It is required to set the Allow access right for the Incident access functional area for users to have access to the MDR section in Kaspersky Security Center. If the Incident access functional area has the Deny access right set, users can see only the Getting started tab of the MDR section in Kaspersky Security Center.
Permits users to create, view, and edit tenants.
Permits users to manage Kaspersky Managed Detection and Response through the REST API.
The following table shows the minimum set of access rights.
Minimum set of access rights
Functional area |
Allow |
Deny |
---|---|---|
Application Integration |
||
Incident access |
||
Auto-accept settings |
||
Response management |
||
Tenant management |
||
Incident summary scheduling |
||
REST API access |
The access rights are set.
Page top