Installation user roles

QRadar® EDR installation tasks require specialized skills and knowledge. You might have a cluster administrator and a system administrator in your organization, or you might have one administrator who does it all. Whichever way your organization is structured administrators need a working knowledge of containers and Kubernetes.

Cluster administrator

A cluster administrator creates, updates, and deletes clusters, adds and removes nodes, and controls who can access the cluster. They also plan when cluster maintenance tasks occur, configure cluster-level auto-scaling, and enable or disable logging and monitoring for the cluster. Cluster administration tasks are specific to the cluster platform and are done entirely by using the cloud console, the command-line interface (CLI), or the APIs. To control the cluster's internal behavior, cloud administrators use the Kubernetes API and the kubectl CLI.

Before software is installed on a cloud, the cluster administrator must assess the resources that are needed and set up logical grouping of resources. For example, as an administrator of an Red Hat® OpenShift® Container Platform cluster, your account has permissions and access to all user-created projects in your organization’s cluster.

A cluster administrator conducts the following tasks during QRadar EDR installation.
  1. Create a Red Hat OpenShift Container Platform cluster. For more information, see Setting up Red Hat OpenShift Container Platform clusters.
  2. Configure storage. For more information, see Storage requirements.
  3. Create a dedicated namespace in the cluster. The installation path that you choose in Installing QRadar EDR includes instructions.
  4. Provide the cluster and namespace information to the admin user.

System administrator

A system administrator is responsible for the upkeep, configuration, and reliable operation of network servers. They need to be familiar with the QRadar EDR software and the prerequisites. A system administrator conducts the following tasks during a QRadar EDR installation.

  1. Make sure that the namespace has access to the images and registry.
  2. Install QRadar EDR. For more information, see Installing QRadar EDR.
  3. To secure your data, enable encryption. See Enabling etcd encryption.
  4. Install the QRadar EDR Agent on your endpoints. See Installing the QRadar EDR Agent.