The table below describes the actions available to each user role (User, Admin, Viewer) across different modules in Prime Detect.
Pipelines
Action | User | Admin | Viewer |
View detection pipelines | ✅ | ✅ | ✅ |
Run/Stop detection pipeline | ✅ | ✅ | ❌ |
Create detection pipeline | ✅ | ✅ | ❌ |
Edit detection pipeline | ✅ | ✅ | ❌ |
Delete detection pipeline | ✅ | ✅ | ❌ |
View detection pipeline details | ✅ | ✅ | ✅ |
Activate or deactivate rules in detection pipeline | ✅ | ✅ | ❌ |
Edit Sigma rule applied to detection pipeline | ✅ | ✅ | ❌ |
View correlation pipelines | ✅ | ✅ | ✅ |
Run/Stop correlation pipeline | ✅ | ✅ | ❌ |
Create correlation pipeline | ✅ | ✅ | ❌ |
Edit correlation pipeline | ✅ | ✅ | ❌ |
Delete correlation pipeline | ✅ | ✅ | ❌ |
Attack Chains
Action | User | Admin | Viewer |
View attack chains | ✅ | ✅ | ✅ |
Query events in your SIEM | ✅ | ✅ | ❌ |
Enable or disable monitoring of threat in correlation pipeline | ✅ | ✅ | ❌ |
Repositories
Action | User | Admin | Viewer |
View repositories | ✅ | ✅ | ✅ |
Create repository | ✅ | ✅ | ❌ |
Edit repository | ✅ | ✅ | ❌ |
Delete repository | ✅ | ✅ | ❌ |
Refresh repositories | ✅ | ✅ | ❌ |
Turn off synchronization for repository | ✅ | ✅ | ❌ |
View repository on SOC Prime Platform | ✅ | ✅ | ❌ |
Edit Sigma rule in repository | ✅ | ✅ | ❌ |
Add rules or set of rules to repository | ✅ | ✅ | ❌ |
Topics
Action | User | Admin | Viewer |
View topics | ✅ | ✅ | ✅ |
Synchronize topics | ✅ | ✅ | ❌ |
Log Sources
Action | User | Admin | Viewer |
View log sources | ✅ | ✅ | ✅ |
Create log source | ✅ | ✅ | ❌ |
Edit log source | ✅ | ✅ | ❌ |
Delete log source | ✅ | ✅ | ❌ |
Generate mapping with AI | ✅ | ✅ | ❌ |
Pipeline Runtime
Action | User | Admin | Viewer |
View performance and resource settings for pipelines | ✅ | ✅ | ✅ |
Configure performance and resource settings for pipelines | ❌ | ✅ | ❌ |
Integrations
Action | User | Admin | Viewer |
View integration profiles | ✅ | ✅ | ✅ |
Add integration profile | ✅ | ✅ | ❌ |
Edit integration profile | ✅ | ✅ | ❌ |
Delete integration profile | ✅ | ✅ | ❌ |
Filters
Action | User | Admin | Viewer |
View filters | ✅ | ✅ | ✅ |
Create filter | ✅ | ✅ | ❌ |
Edit filter | ✅ | ✅ | ❌ |
Delete filter | ✅ | ✅ | ❌ |
User Management
Action | User | Admin | Viewer |
View user details | ❌ | ✅ | ❌ |
Add new user | ❌ | ✅ | ❌ |
Edit user | ❌ | ✅ | ❌ |
Delete user | ❌ | ✅ | ❌ |
Audit Log
Action | User | Admin | Viewer |
Monitor user and system audit logs | ✅ | ✅ | ❌ |
Export user and system audit logs to CSV | ✅ | ✅ | ❌ |
System Status
Action | User | Admin | Viewer |
View system status | ✅ | ✅ | ✅ |
Download debug logs | ✅ | ✅ | ❌ |
Account Settings
Action | User | Admin | Viewer |
View account information and security settings | ✅ | ✅ | ✅ |
Edit personal information | ✅ | ✅ | ❌ |
Change password | ✅ | ✅ | ❌ |
