CB ThreatHunter: Which User Role Permissions are Required to Create New Watchlists?

[#1]

Environment

• CB ThreatHunter PSC Console: All versions

Question

Which RBAC permissions are required to create new Watchlists?

Answer

• The "Manage Third Party Watchlists" permission is required to add curated Watchlists
• The "Manage Watchlists" permission is required to add custom Watchlists

Additional Notes

The following default Roles include permissions for adding Watchlists

• Level 3 Analyst
• Super Admin
• Admin - Legacy
• Live Response Admin - Legacy

Related Content

CB Defense: How to Get Started with Role Based Access Control (RBAC)
CB ThreatHunter: How to build a custom watchlist from the watchlists page
CB ThreatHunter: How to add queries to watchlists from the Investigate page