The SOAR MSSP administrator manages the SOAR MSSP deployment. The SOAR MSSP administrator requires Accounts
management
Admin permissions and User management
Admin permissions in the Provider account to create Standard accounts and add users and
assign permissions to users.
Before you begin
The Provider account and its Standard accounts must be created.
About this task
You must be an IBM Security QRadar Suite administrator to
add the SOAR MSSP administrator user to the Provider account and assign permissions.
Procedure
-
Go to the Provider account account by selecting it
from the account menu beside your user name.
- Click User management > Add user and add the SOAR MSSP administrator user to the Provider account and assign the following minimum set of
permissions:
- Accounts configuration:
Admin.
- User management:
Admin.
- Case Management:
Admin.
- Orchestration & Automation:
Admin.
-
Go to each of the Standard accounts accounts in
turn by selecting them from the account menu beside your user name.
- Click User management > Add user and add the SOAR MSSP administrator user to each of the Standard accounts in turn, and assign the following minimum set
of permissions:
- User management:
Admin.
- Case Management:
Admin.
- Orchestration & Automation:
Admin.
Results
The SOAR MSSP administrator is added to the Provider account and has the required permissions to create
Standard accounts and manage users in a SOAR MSSP deployment.