The table below describes the actions available to each user role (User, Admin, Viewer) across different modules in Prime Detect.
Pipelines
Action | User | Admin | Viewer |
View matching pipelines | ✅ | ✅ | ✅ |
Run/Stop matching pipeline | ✅ | ✅ | ❌ |
Create matching pipeline | ✅ | ✅ | ❌ |
Edit matching pipeline | ✅ | ✅ | ❌ |
Delete matching pipeline | ✅ | ✅ | ❌ |
View matching pipeline details | ✅ | ✅ | ✅ |
Activate or deactivate rules in matching pipeline | ✅ | ✅ | ❌ |
Edit Sigma rule applied to matching pipeline | ✅ | ✅ | ❌ |
View chaining pipelines | ✅ | ✅ | ✅ |
Run/Stop chaining pipeline | ✅ | ✅ | ❌ |
Create chaining pipeline | ✅ | ✅ | ❌ |
Edit chaining pipeline | ✅ | ✅ | ❌ |
Delete chaining pipeline | ✅ | ✅ | ❌ |
Attack Chains
Action | User | Admin | Viewer |
View attack chains | ✅ | ✅ | ✅ |
Query events in your SIEM | ✅ | ✅ | ❌ |
Enable or disable monitoring of threat in chaining pipeline | ✅ | ✅ | ❌ |
Repositories
Action | User | Admin | Viewer |
View repositories | ✅ | ✅ | ✅ |
Create repository | ✅ | ✅ | ❌ |
Edit repository | ✅ | ✅ | ❌ |
Delete repository | ✅ | ✅ | ❌ |
Refresh repositories | ✅ | ✅ | ❌ |
Turn off synchronization for repository | ✅ | ✅ | ❌ |
View repository on SOC Prime Platform | ✅ | ✅ | ❌ |
Edit Sigma rule in repository | ✅ | ✅ | ❌ |
Add rules or set of rules to repository | ✅ | ✅ | ❌ |
Topics
Action | User | Admin | Viewer |
View topics | ✅ | ✅ | ✅ |
Synchronize topics | ✅ | ✅ | ❌ |
Log Sources
Action | User | Admin | Viewer |
View log sources | ✅ | ✅ | ✅ |
Create log source | ✅ | ✅ | ❌ |
Edit log source | ✅ | ✅ | ❌ |
Delete log source | ✅ | ✅ | ❌ |
Generate mapping with AI | ✅ | ✅ | ❌ |
Pipeline Runtime
Action | User | Admin | Viewer |
View performance and resource settings for pipelines | ✅ | ✅ | ✅ |
Configure performance and resource settings for pipelines | ❌ | ✅ | ❌ |
Integrations
Action | User | Admin | Viewer |
View integration profiles | ✅ | ✅ | ✅ |
Add integration profile | ✅ | ✅ | ❌ |
Edit integration profile | ✅ | ✅ | ❌ |
Delete integration profile | ✅ | ✅ | ❌ |
Filters
Action | User | Admin | Viewer |
View filters | ✅ | ✅ | ✅ |
Create filter | ✅ | ✅ | ❌ |
Edit filter | ✅ | ✅ | ❌ |
Delete filter | ✅ | ✅ | ❌ |
User Management
Action | User | Admin | Viewer |
View user details | ❌ | ✅ | ❌ |
Add new user | ❌ | ✅ | ❌ |
Edit user | ❌ | ✅ | ❌ |
Delete user | ❌ | ✅ | ❌ |
Audit Log
Action | User | Admin | Viewer |
Monitor user and system audit logs | ✅ | ✅ | ❌ |
Export user and system audit logs to CSV | ✅ | ✅ | ❌ |
System Status
Action | User | Admin | Viewer |
View system status | ✅ | ✅ | ✅ |
Download debug logs | ✅ | ✅ | ❌ |
Account Settings
Action | User | Admin | Viewer |
View account information and security settings | ✅ | ✅ | ✅ |
Edit personal information | ✅ | ✅ | ❌ |
Change password | ✅ | ✅ | ❌ |
