Views:

Create a custom user role to generate Authentication keys and enable integration with the TrendAI™ Vision One for Cortex XSOAR app.

The following steps detail how to create a custom user role with the permissions needed to integrate with the TrendAI™ Vision One for Cortex XSOAR app by generating an authentication token.
Note
Note
The Master Administrator role is capable of connecting with third-party apps. However, TrendAI™ recommends using a dedicated user account with custom permission settings.

Procedure

  1. Go to Administration → User Roles.
  2. Click Add.
    The Custom Role Setting panel opens.
  3. In the general tab, type a descriptive name for the role, such as Cortex XSOAR Integration.
  4. (Optional) Type a description for the role.
  5. In the permissions tab, select the following:
    Category
    Application
    Threat Intelligence
    Suspicious Object Management:
    • View, filter, and search
    • Manage lists and configure settings
    • View object in Sandbox Analysis
    Sandbox Analysis:
    • View, filter, and search
    • Submit objects
    XDR
    Workbench:
    • Add exceptions
    • Modify alert details
    • View, filter, and search
    Response Management
    Response Management:
    • View, filter, and search Task List tab
    • Approve/Reject Automated Response tasks
    • Collect file
    • Delete/Quarantine messages
    • Isolate endpoint
    • Terminate process
    • View network exceptions
    • Add to block list
    • Edit network exceptions
    • Submit to sandbox
  6. Click Submit.
    The user role appears in the list.