topic Re: Role to access va_cves and va_endpoint datasets in Cortex XDR Discussions

Role to access va_cves and va_endpoint datasets

APezuela — Mon, 17 Mar 2025 14:28:01 GMT

Hi,
I need help creating a new role in the console that allows access via API to dump the data from the datasheets va_cves and va_endpoints. Could you help me?
Best regards.

Re: Role to access va_cves and va_endpoint datasets

aspatil — Mon, 17 Mar 2025 16:45:36 GMT

Hello @APezuela ,

Create a custom role with Dataset Management Enabled and Select access to va_cves and va_endpoints. Also choose view/edit for query center

Create a API key with the custom role and see if that works.

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". Thank you.

Re: Role to access va_cves and va_endpoint datasets

APezuela — Tue, 18 Mar 2025 08:16:47 GMT

I will check it.

Thank you

Re: Role to access va_cves and va_endpoint datasets

aspatil — Tue, 18 Mar 2025 08:43:04 GMT

After checking If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". Thank you.

Re: Role to access va_cves and va_endpoint datasets

APezuela — Fri, 21 Mar 2025 08:43:54 GMT

After implementing the recommendations, I still haven't been able to obtain the data. However, if I query other available information, such as incidents, I can retrieve it without any issues. This is the error I get from my python code:

DEBUG:requests_logger:Body: {'reply': {'err_code': 403, 'err_msg': 'Forbidden. Access was denied to this resource.', 'err_extra': 'Insufficient permissions for api key'}}