Permissions by ER Cloud Components

This section includes references on Resource Permissions required to access specific features and/or components in Enterprise Recon Cloud.

Resource permissions and Global Permissions that are assigned to a user grants access to specific components in ER Cloud.

A Global Admin user has administrative privileges to access all ER Cloud resources and is therefore not included in the table below.

ER Cloud Components	Global Permissions	Resource Permissions
Dashboard		Target / Target Group: Scan, Report or Remediate
Investigate PII PRO		Target / Target Group: Report - Detailed Reporting, Access Control, Remediate, or Classification
Tracker PRO	All users.
Targets
Add Targets		Target / Target Group: Scan
View Targets		Target / Target Group: Scan, Report or Remediate
Scan Targets		Target / Target Group: Scan
Edit Targets	System Manager and Target / Target Group: Scan, Report or Remediate ^[1]
High level summary reports		Target / Target Group: Report - Summary Reporting
Detailed reports		Target / Target Group: Report - Detailed Reporting
View inaccessible locations		Target / Target Group: Scan, Report - Detailed Reporting or Remediate
Scans
New Scans		Target / Target Group: Scan
Schedule Manager		Target / Target Group: Scan
Data Type Profile
View data type profiles	Data Type Author	Target / Target Group: Scan
Add or edit data type profiles	Data Type Author
Add custom data types PII PRO	Data Type Author
Global Filters
Add, edit or delete global filters	System Manager ^[2]	Target / Target Group: Scan, Remediate - Mark Location for Report
Import or export global filters	System Manager
System
Activity Log	System Manager ^[3]	Target / Target Group: Scan, Report or Remediate or Credentials: Edit, Use ^[3]
Server Information	System Manager
License Details	System Manager
Users
User Accounts
Add, edit or delete user accounts	System Manager
Manage Global Permissions	Resource Permissions Manager
Manage Resource Permissions	Resource Permissions Manager
Roles
Add, edit or delete roles	Resource Permissions Manager
Assign roles to user accounts	Resource Permissions Manager
Active Directory	System Manager
Settings > Targets
Network Discovery	System Manager
Target Credentials
Add new credential sets		Target / Target Group: Scan
Edit credential sets		Credentials: Edit
Use credential sets		Credentials: Use
Settings > Agents
Agent Admin	System Manager
Node Agent Downloads	All users.
Settings > Security
Login Policy	System Manager
Access Control List	System Manager
Settings > Notifications
Notification Policy	System Manager ^[4]	Target / Target Group: Scan ^[4]
Mail Settings	System Manager
Settings > Remediation
Tombstone Text Editor	System Manager
PRO Settings PRO
Data Access Management	System Manager
Delegated Remediation Email	System Manager
Settings > Analysis > ODBC Driver Downloads PRO
ODBC Driver Downloads	All users.
Access ER Cloud data via ODBC Reporting feature		Target / Target Group: Report - Detailed Reporting
Settings > Analysis > Risk Profile PRO
Manage Risk Profiles	Risk Admin
Settings > Analysis > Classification PRO
Enable and manage Microsoft Information Protection (MIP) credentials	Classification Admin
Username
My Account	All users.
API Access	Allow API Access ^[5] PII PRO

Note:

^[1] System Managers can edit Targets they have visibility to via Scan, Report or Remediation permissions.
^[2] System Managers can add Global Filters that apply to all Targets / Target Groups, or add Global Filters that apply only to Targets / Target Groups to which they have visibility to.
^[3] Activity Log only contains events that the user has visibility or permissions to.
^[4] Notification and Alerts are only for Targets and events that the user has permissions to.
^[5] User is able to use the API to access resources to which they have explicit permissions to.

To grant access according to roles and permissions in ER Cloud, refer to the Grant User Permissions section.

PII PRO This feature is only available in Enterprise Recon Cloud PII and Enterprise Recon Pro Editions. To find out more about upgrading your ER Cloud license, please contact Ground Labs Licensing. See Subscription License for more information.

PRO This feature is only available in Enterprise Recon Cloud PRO Edition. To find out more about upgrading your ER Cloud license, please contact Ground Labs Licensing. See Subscription License for more information.