Tenable-Provided Roles

This topic describes the performance of or functionality for a new feature in Tenable.io Key Enhancements. For more information, see Tenable.io Key Enhancements.

The following table briefly describes Tenable-defined user roles in Tenable.io, along with the basic privileges associated with them. For detailed information about the privileges associated with these roles, see Tenable-Provided Role Privileges.

Role Name	Description
Tenable.io Vulnerability Management User Roles
Basic	Can only manage their user profile and view scan results, including dashboards.
Scan Operator	Can create and run scans, but may only use existing scan user-defined scan templates that were created by a standard user or higher. They can create user target groups for use in scans.
Standard	In addition to scan operator privileges, can view user-defined scan templates that were created by a scan manager user or higher.
Scan Manager	In addition to standard user privileges, can configure scan settings and create, configure, use, and delete user-defined scan templates. They can also manage scanners, agents, and exclusions.
Administrator	Has all permissions and privileges, is responsible for setting up the account, and knows the organization's architecture. They can create groups to organize different business units, and add and manage users on the account.
Tenable.io Web Application Scanning User Roles
Basic	Can only manage their user profile and view scan results, including dashboards.
Scan Operator	Can create and run web application scans, but may only use existing scan user-defined scan templates that were created by a standard user or higher.
Standard	In addition to scan operator privileges, can view user-defined scan templates that were created by a scan manager user or higher.
Scan Manager	In addition to standard user privileges, can configure scan settings and create, configure, use, and delete user-defined scan templates.
Administrator	Has all permissions and privileges, is responsible for setting up the account, and knows the organization's architecture. They can create groups to organize different business units, and add and manage users on the account.
Tenable.io Container Security User Roles
Basic	Limited to viewing, searching, and filtering Tenable.io Container Security data.
Scan Operator and Standard	Can import, manage, and delete images and image repositories. They can also view policies, but may only use policies set by a scan manager user or higher.
Scan Manager	In addition to scan operator privileges, can create, manage, and enforce policies.
Administrator	Has all permissions and privileges, is responsible for setting up the account, adding and managing users, and configuring connections to registries.