To access file deletion features, a user must have a login account with a User Role that includes the Delete files permission.
Permission for these features is not granted by default to the admin account or members of the Administrator account group. You must explicitly add it, either by enabling Delete files permission for an existing role or by creating a new role for file deletion and adding it to accounts as you choose. See Managing Console Login Accounts for more on enabling permissions in an account.
Caution: This feature should be used with extreme care, and in full compliance with your organization's policy on accessing other users’ files. Be sure that only those
Carbon Black App Control Console users that absolutely need access to the file deletion feature are given permission to use it.