Assigning user capabilities for Manager for YARA and Sigma Rules

After you install Manager for Yara and Sigma Rules, it is displayed as a capability in User Roles on the Admin tab. To use the app, a QRadar® administrator must assign the app, and any other capabilities that it requires, to a user role.

Security profiles are different than user roles. Security profiles define which networks, log sources, and domains that a user can access. For more information, see the Security Profiles section in the IBM QRadar Administration Guide. Security profiles or user roles that are overly restrictive can result in data not appearing.

Procedure

  1. Click User Roles in the User Management section on the Admin tab.
  2. From the list of available user roles, select the user role that you want to assign the app to.
  3. Select the check box for Manager for YARA and Sigma Rules, and then click Save.
  4. On the Admin tab, click Deploy Changes.