Role-Based Access Control

Role-Based Access Control (RBAC) defines the activities that a user can perform in the associated projects and on the Tenable Cloud Security console. Create users for Tenable Cloud Security and then assign roles to the users from Tenable Vulnerability Management. For more information about user roles in Tenable Vulnerability Management, see User Roles.

Entity	Task	Viewer	Operator	Administrator
Project	Create		✔	✔
	Modify		✔	✔
	Delete		✔	✔
	View	✔	✔	✔
Custom policies	Create			✔
	Modify			✔
	Delete			✔
	View	✔	✔	✔
Cloud accounts	Add		✔	✔
Cloud accounts	Remove		✔	✔
Repositories	Add		✔	✔
Repositories	Remove		✔	✔
Pipeline	Run	✔	✔	✔
Kubernetes cluster	Scan using Helm charts		✔	✔
Integrations	Add		✔	✔
Integrations	Remove		✔	✔
Scans	Run		✔	✔
Scans	Schedule		✔	✔
Findings (misconfigurations and vulnerabilities)	View findings, tickets, pull requests	✔	✔	✔
	Ignore		✔	✔
	Unignore		✔	✔
	Create Ticket		✔	✔
	Create Pull Request		✔	✔
Alerts	Configure		✔	✔
Alerts	View	✔	✔	✔
Dashboards	View	✔	✔	✔
Reports	View	✔	✔	✔
Reports	Export to CSV		✔	✔
User Management	Not applicable for Tenable Cloud Security. Note: You must create and manage users for Tenable Cloud Security from Tenable Vulnerability Management. For more information about how user roles in Tenable Cloud Security map to corresponding roles in Tenable Vulnerability Management, see User Role Mapping between Tenable Vulnerability Management and Tenable Cloud Security.	NA	NA	NA