Tenable Security Center API: TES User Permissions

/tes/userPermissions

Methods
GET

Get information about the current user including, user details, role, group, and org.

Fields Parameter
Expand

No Allowed Fields

Example Response (Admin role)
Expand

{
    "type": "regular",
    "response": {
        "user": {
            "id": "1",
            "status": "0",
            "username": "admin",
            "firstname": "admin",
            "lastname": "admin",
            "title": "Application Administrator",
            "email": "",
            "address": "",
            "city": "",
            "state": "",
            "country": "",
            "phone": "",
            "fax": "",
            "createdTime": "1721707018",
            "modifiedTime": "1721827979",
            "lastLogin": "1721919082",
            "lastLoginIP": "10.253.129.137",
            "mustChangePassword": "false",
            "passwordExpires": "false",
            "passwordExpiration": null,
            "passwordExpirationOverride": "false",
            "passwordSetDate": "1721713971",
            "locked": "false",
            "failedLogins": "0",
            "authType": "tns",
            "fingerprint": null,
            "password": "SET",
            "ldapUsername": "",
            "managedUsersGroups": [],
            "managedObjectsGroups": [],
            "preferences": [
                {
                    "name": "edg.admin_users.admin1",
                    "value": "{\"activeColumns\":[{\"field\":\"username\",\"visible\":true,\"width\":259,\"sortDir\":\"none\"},{\"field\":\"name\",\"visible\":true,\"width\":259,\"sortDir\":\"none\"},{\"field\":\"authType\",\"visible\":true,\"width\":259,\"sortDir\":\"none\"},{\"field\":\"role\",\"visible\":true,\"width\":259,\"sortDir\":\"none\"},{\"field\":\"title\",\"visible\":true,\"width\":259,\"sortDir\":\"none\"},{\"field\":\"lastLogin\",\"visible\":true,\"width\":264,\"sortDir\":\"none\"}]}",
                    "tag": "application"
                },
                {
                    "name": "timezone",
                    "value": "America/New_York",
                    "tag": "system"
                }
            ],
            "linkedUsers": [],
            "apiKeys": [],
            "canUse": true,
            "canManage": true,
            "uuid": "480087C9-678B-46DC-A401-3C714506AACA",
            "role": {
                "id": "1",
                "name": "Administrator",
                "description": "Role defining an administrator of the application"
            },
            "ldap": {
                "id": -1,
                "name": "",
                "description": ""
            },
            "group": {
                "id": -1,
                "name": "",
                "description": ""
            }
        },
        "role": {
            "id": "1",
            "name": "Administrator",
            "description": "Role defining an administrator of the application",
            "createdTime": "0",
            "modifiedTime": "0",
            "permManageApp": "true",
            "permManageGroups": "false",
            "permManageRoles": "false",
            "permManageImages": "false",
            "permManageGroupRelationships": "false",
            "permManageBlackoutWindows": "true",
            "permManageAttributeSets": "false",
            "permCreateTickets": "false",
            "permCreateAlerts": "false",
            "permCreateAuditFiles": "false",
            "permCreateLDAPAssets": "false",
            "permCreatePolicies": "false",
            "permPurgeTickets": "false",
            "permPurgeScanResults": "false",
            "permPurgeReportResults": "false",
            "permScan": "none",
            "permAgentsScan": "false",
            "permAgentsSync": "false",
            "permShareObjects": "false",
            "permUpdateFeeds": "true",
            "permUploadNessusResults": "false",
            "permViewOrgLogs": "true",
            "permManageAcceptRiskRules": "true",
            "permManageRecastRiskRules": "true",
            "permManageACR": "true",
            "permViewDomainInventoryAssets": "false",
            "permManageAttackSurfaceDomains": "false",
            "permManageVulnRoutingRules": "false",
            "permViewHostAssets": "true",
            "permManageRiskRules": "true",
            "permTPCAdmin": "true",
            "permConSecUserManagement": "true",
            "permConSecManageScanners": "false",
            "permConSecScheduleScan": "false",
            "permConSecExportData": "false",
            "permConSecRunReport": "false",
            "permConSecViewApp": "false",
            "permConSecManagePolicy": "false",
            "permConSecViewLogs": "true",
            "permSCViewApp": "true",
            "organizationCounts": [
                {
                    "id": 0,
                    "userCount": "2"
                },
                {
                    "id": "1",
                    "userCount": "0"
                }
            ],
            "creator": {
                "id": "1",
                "username": "admin",
                "firstname": "admin",
                "lastname": "admin",
                "uuid": "480087C9-678B-46DC-A401-3C714506AACA"
            }
        }
    },
    "error_code": 0,
    "error_msg": "",
    "warnings": [],
    "timestamp": 1721919231
}

Example Response (Org user)

Expand

{
    "type": "regular",
    "response": {
        "user": {
            "id": "1",
            "status": "0",
            "username": "qa",
            "firstname": "",
            "lastname": "",
            "title": "",
            "email": "",
            "address": "",
            "city": "",
            "state": "",
            "country": "",
            "phone": "",
            "fax": "",
            "createdTime": "1721713973",
            "modifiedTime": "1721775662",
            "lastLogin": "1722022750",
            "lastLoginIP": "10.253.129.137",
            "mustChangePassword": "false",
            "passwordExpires": "false",
            "passwordExpiration": null,
            "passwordExpirationOverride": "false",
            "passwordSetDate": "1721713973",
            "locked": "false",
            "failedLogins": "0",
            "authType": "tns",
            "fingerprint": null,
            "password": "SET",
            "ldapUsername": "",
            "managedUsersGroups": [
                {
                    "id": "-1",
                    "name": "All Groups",
                    "description": "All Groups"
                }
            ],
            "managedObjectsGroups": [
                {
                    "id": "-1",
                    "name": "All Groups",
                    "description": "All Groups"
                }
            ],
            "preferences": [
                {
                    "name": "edg.groupPermission.orgundefined.userundefined",
                    "value": "{\"activeColumns\":[{\"field\":\"groupName\",\"visible\":true,\"width\":320,\"sortDir\":\"asc\"},{\"field\":\"userPermission\",\"visible\":true,\"width\":320,\"sortDir\":\"none\"},{\"field\":\"objectPermission\",\"visible\":true,\"width\":320,\"sortDir\":\"none\"}]}",
                    "tag": "application"
                },
                {
                    "name": "edg.policies.user1.org1",
                    "value": "{\"activeColumns\":[{\"field\":\"name\",\"visible\":true,\"width\":261,\"sortDir\":\"asc\"},{\"field\":\"tag\",\"visible\":true,\"width\":261,\"sortDir\":\"none\"},{\"field\":\"policyTemplate\",\"visible\":true,\"width\":261,\"sortDir\":\"none\"},{\"field\":\"ownerGroup\",\"visible\":true,\"width\":261,\"sortDir\":\"none\"},{\"field\":\"owner\",\"visible\":true,\"width\":261,\"sortDir\":\"none\"},{\"field\":\"modifiedTime\",\"visible\":true,\"width\":265,\"sortDir\":\"none\"}]}",
                    "tag": "application"
                },
                {
                    "name": "edg.users.user1.org1",
                    "value": "{\"activeColumns\":[{\"field\":\"username\",\"visible\":true,\"width\":222,\"sortDir\":\"none\"},{\"field\":\"name\",\"visible\":true,\"width\":222,\"sortDir\":\"none\"},{\"field\":\"group\",\"visible\":true,\"width\":222,\"sortDir\":\"none\"},{\"field\":\"authType\",\"visible\":true,\"width\":222,\"sortDir\":\"none\"},{\"field\":\"role\",\"visible\":true,\"width\":222,\"sortDir\":\"none\"},{\"field\":\"title\",\"visible\":true,\"width\":222,\"sortDir\":\"none\"},{\"field\":\"lastLogin\",\"visible\":true,\"width\":227,\"sortDir\":\"none\"}]}",
                    "tag": "application"
                },
                {
                    "name": "darkMode",
                    "value": "false",
                    "tag": "system"
                },
                {
                    "name": "timezone",
                    "value": "America/New_York",
                    "tag": "system"
                }
            ],
            "apiKeys": [],
            "canUse": true,
            "canManage": true,
            "uuid": "4F70F71A-B892-419B-B8D0-51803AAF76C9",
            "role": {
                "id": "2",
                "name": "Security Manager",
                "description": "The Security Manager role has full access to all actions at the organization level. A Security Manager has the ability to create new groups and manage existing ones. A Security Manager can also define how users interact with other groups.\n\nThe ability to manage other users and their objects can be configured using group permissions on the Access tab of User add/edit. This includes viewing and stopping running scans and reports."
            },
            "responsibleAsset": {
                "id": -1,
                "name": "",
                "description": ""
            },
            "group": {
                "id": "0",
                "name": "Full Access",
                "description": "Full Access group"
            },
            "ldap": {
                "id": -1,
                "name": "",
                "description": ""
            }
        },
        "role": {
            "id": "2",
            "name": "Security Manager",
            "description": "The Security Manager role has full access to all actions at the organization level. A Security Manager has the ability to create new groups and manage existing ones. A Security Manager can also define how users interact with other groups.\n\nThe ability to manage other users and their objects can be configured using group permissions on the Access tab of User add/edit. This includes viewing and stopping running scans and reports.",
            "createdTime": "0",
            "modifiedTime": "0",
            "permManageApp": "false",
            "permManageGroups": "true",
            "permManageRoles": "true",
            "permManageImages": "true",
            "permManageGroupRelationships": "true",
            "permManageBlackoutWindows": "true",
            "permManageAttributeSets": "true",
            "permCreateTickets": "true",
            "permCreateAlerts": "true",
            "permCreateAuditFiles": "true",
            "permCreateLDAPAssets": "true",
            "permCreatePolicies": "true",
            "permPurgeTickets": "false",
            "permPurgeScanResults": "false",
            "permPurgeReportResults": "false",
            "permScan": "full",
            "permAgentsScan": "true",
            "permAgentsSync": "true",
            "permShareObjects": "true",
            "permUpdateFeeds": "true",
            "permUploadNessusResults": "true",
            "permViewOrgLogs": "true",
            "permManageAcceptRiskRules": "true",
            "permManageRecastRiskRules": "true",
            "permManageACR": "true",
            "permViewDomainInventoryAssets": "true",
            "permManageAttackSurfaceDomains": "true",
            "permManageVulnRoutingRules": "true",
            "permViewHostAssets": "true",
            "permManageRiskRules": "true",
            "permTPCAdmin": "false",
            "permConSecUserManagement": "true",
            "permConSecManageScanners": "true",
            "permConSecScheduleScan": "true",
            "permConSecExportData": "true",
            "permConSecRunReport": "true",
            "permConSecViewApp": "true",
            "permConSecManagePolicy": "true",
            "permConSecViewLogs": "true",
            "permSCViewApp": "true",
            "organizationCounts": [
                {
                    "id": 1,
                    "userCount": "1"
                }
            ],
            "creator": {
                "id": "1",
                "username": "qa",
                "firstname": "",
                "lastname": "",
                "uuid": "4F70F71A-B892-419B-B8D0-51803AAF76C9"
            }
        },
        "group": {
            "id": "0",
            "name": "Full Access",
            "description": "Full Access group",
            "createdTime": "1721713971",
            "modifiedTime": "1721713971",
            "createDefaultObjects": "true",
            "lces": [],
            "repositories": [
                {
                    "id": "1",
                    "name": "universal",
                    "description": "",
                    "sciID": "1",
                    "lastVulnUpdate": "0",
                    "type": "Local",
                    "dataFormat": "universal",
                    "uuid": "361FEC46-5532-4F14-8EA2-D7D22F3AD338"
                }
            ],
            "definingAssets": [
                {
                    "id": "0",
                    "name": "All Defined Ranges",
                    "description": "",
                    "uuid": null
                },
                {
                    "id": "0",
                    "name": "All Defined Ranges",
                    "description": "All defining ranges of the Group in whose context this Asset is being evaluated.",
                    "uuid": null
                }
            ],
            "userCount": 4,
            "users": [
                {
                    "id": "1",
                    "username": "qa",
                    "firstname": "",
                    "lastname": "",
                    "uuid": "4F70F71A-B892-419B-B8D0-51803AAF76C9"
                },
                {
                    "id": "2",
                    "username": "consecadmin",
                    "firstname": "",
                    "lastname": "",
                    "uuid": "20EBC47C-AE83-4B59-814A-6CE2F425C57C"
                }
            ],
            "consecRBACResources": [],
            "assets": [],
            "policies": [],
            "queries": [],
            "credentials": [],
            "dashboardTabs": [],
            "auditFiles": [],
            "arcs": []
        },
        "organization": {
            "id": "1",
            "name": "TES",
            "description": "",
            "email": "",
            "address": "",
            "city": "",
            "state": "",
            "country": "",
            "phone": "",
            "fax": "",
            "ipInfoLinks": [
                {
                    "name": "SANS",
                    "link": "https://isc.sans.edu/ipinfo.html?ip=%IP%"
                },
                {
                    "name": "ARIN",
                    "link": "https://whois.arin.net/rest/ip/%IP%"
                }
            ],
            "zoneSelection": "selectable+auto",
            "restrictedIPs": "",
            "vulnScoreLow": "1",
            "vulnScoreMedium": "3",
            "vulnScoreHigh": "10",
            "vulnScoreCritical": "40",
            "vulnScoringSystem": "CVSSv3",
            "createdTime": "1721713971",
            "modifiedTime": "1721715001",
            "passwordExpires": "false",
            "passwordExpiration": null,
            "userCount": "4",
            "lces": [],
            "repositories": [
                {
                    "id": "1",
                    "name": "universal",
                    "description": "",
                    "type": "Local",
                    "dataFormat": "universal",
                    "groupAssign": "all",
                    "uuid": "361FEC46-5532-4F14-8EA2-D7D22F3AD338"
                }
            ],
            "zones": [
                {
                    "id": "1",
                    "name": "Default Scan Zone",
                    "description": "",
                    "uuid": "0B4C4207-F981-409C-8BC3-4B4E379455F4"
                }
            ],
            "nessusManagers": [],
            "pubSites": [],
            "ldaps": [],
            "scannerKeyExpiration": "90",
            "consecRBACResources": [],
            "uuid": "85E04564-EAA9-4E8E-A645-0AD45931609C"
        }
    },
    "error_code": 0,
    "error_msg": "",
    "warnings": [],
    "timestamp": 1722022770
}