Creating an authorized service token for QRadar Operations

You can create an authorized service token to authenticate the background polling service that the Operations app uses to request data from IBM® QRadar®.

About this task

This procedure is optional. If you don't create an authorized service token, requests from the Operations app are made by the user of the app and are limited by that user's permissions.

QRadar on Cloud administrators can learn how to add and manage authorized service tokens by reading Authorized service tokens.

If you're a QRadar on Cloud customer, contact Customer Support to create an authorized service token for you.

1. On the Admin tab, click Authorized Services in the User Management section.
2. In the Authorized Services window, click Add Authorized Service.
3. Add the relevant information in the following fields and click Create Service:
   1. In the Service Name field, type a name for this authorized service. The name can be up to 255 characters in length.
   2. From the User Role list, select the user role that you want to use.
   3. From the Security Profile list, select the security profile that you want to assign to this authorized service. The security profile determines the networks and log sources that this service can access on the QRadar user interface.
   4. In the Expiry Date list, type or select a date that you want this service to expire. If an expiry date is not necessary, select No Expiry.
   5. Click Create Service.
4. Click the row that contains the service you created, select and copy the token string from the Selected Token field in the menu bar, and close the Manage Authorized Services window.
5. On the Admin tab, click Deploy Changes.
6. In the Operations section of the Admin page, click QRadar Operations.
7. Paste the authorized service token string into the SEC Token field and click Save.