Permissions for User Management Tasks

The privileges required to perform different user management tasks varies by task type and location in Carbon Black EDR Unified View or the clusters being viewed.

• User Management Page in Carbon Black EDR Unified View – Only a Carbon Black EDR Unified View administrator can perform the following user management tasks:
  • View all user accounts
  • Modify user accounts
  • Add users
  • Delete users
  • Grant or remove administrator permissions
• Cluster Management Page in Carbon Black EDR Unified View – Only a Carbon Black EDR Unified View administrator can require that users provide an individual API token to authenticate to a cluster.
• My Profile in Carbon Black EDR Unified View – All Unified View users can view and modify their own Carbon Black EDR Unified View user profile on the My Profiles page. This includes providing API tokens to authenticate connections to clusters.
• User Management Page on a cluster – A Carbon Black EDR Unified View user who is authenticated with a global administrator account on a cluster can manage individual cluster accounts from within Carbon Black EDR Unified View.
• My Profile on a cluster – The My Profile on a cluster cannot be modified through Carbon Black EDR Unified View. A Carbon Black EDR Unified View user with a user account on a managed cluster must log into the cluster directly to view or modify their profile. See Operating Exclusions in Single-Cluster Context.