Installation user roles
QRadar® EDR installation tasks require specialized skills and knowledge. You might have a cluster administrator and a system administrator in your organization, or you might have one administrator who does it all. Whichever way your organization is structured administrators need a working knowledge of containers and Kubernetes.
Cluster administrator
A cluster administrator creates, updates, and deletes clusters, adds and removes nodes, and controls who can access the cluster. They also plan when cluster maintenance tasks occur, configure cluster-level auto-scaling, and enable or disable logging and monitoring for the cluster. Cluster administration tasks are specific to the cluster platform and are done entirely by using the cloud console, the command-line interface (CLI), or the APIs. To control the cluster's internal behavior, cloud administrators use the Kubernetes API and the kubectl CLI.
Before software is installed on a cloud, the cluster administrator must assess the resources that are needed and set up logical grouping of resources. For example, as an administrator of an Red Hat® OpenShift® Container Platform cluster, your account has permissions and access to all user-created projects in your organization’s cluster.
- Create a Red Hat OpenShift Container Platform cluster. For more information, see Setting up Red Hat OpenShift Container Platform clusters.
- Configure storage. For more information, see Storage requirements.
- Create a dedicated namespace in the cluster. The installation path that you choose in Installing QRadar EDR includes instructions.
- Provide the cluster and namespace information to the admin user.
System administrator
A system administrator is responsible for the upkeep, configuration, and reliable operation of network servers. They need to be familiar with the QRadar EDR software and the prerequisites. A system administrator conducts the following tasks during a QRadar EDR installation.
- Make sure that the namespace has access to the images and registry.
- Install QRadar EDR. For more information, see Installing QRadar EDR.
- To secure your data, enable encryption. See Enabling etcd encryption.
- Install the QRadar EDR Agent on your endpoints. See Installing the QRadar EDR Agent.