Adding Users

To address incidents, you must assign it to a Security Operations Center (SOC) analyst (assignee) in your organization. To assign, you must add SOC analysts as users with Operator service specific role in the XDR Extended Detection & Response portal. The specific service roles are in addition to the global rules and do not override them. For more information, see Specific Service Rules in the Harmony Endpoint EPMaaS Administration Guide.

To access Specific Service Roles, go to Global Settings > Users > New > Add User and expand Specific Service Roles.

Role	Description
Admin	Full Read and Write access to all system aspects.
Operator	Full access to handle incidents, including taking prevention actions, and read-only access to the Policy menu. Typically, your SOC analyst.
Read-Only	Read-only access to the application.