UBA : User Failed to be Added to Role

The QRadar® User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.

UBA : User Failed to be Added to Role

Enabled by default

False

Default senseValue

10

Description

Detects when an attempt to add a user to a role fails.

Support rule

BB:UBA : Common Event Filters

Log source types

Microsoft Office 365 (EventID: Add-RoleGroupMember-false, Update-RoleGroupMember-false)