XDR Malware scan

[Shahwaz_Md]

Hi All,

We have a middle team that manages the end users and we are planning to give them the process of scanning the endpoints however if an end user initiates a scan we are not getting the event on ACTION CENTRE which makes it difficult to track from our end. 

If we give them the access to console what is least rights they would require to perform this action.

Regards,

Shahwaz

[nsinghvirk]

Hello @Shahwaz_Md 

Thanks for reaching out on LiveCommunity!

You can create a custom role from access management. In which you can choose which ever rights you want to assign to it from "components" section. Only for endpoint scanning right, You need to go to Endpoints -> Endpoints Administration -> Select View/Edit option -> Then simply check the Endpoint scan box as shown in screenshot.

Additionally you can scope these users to specific endpoint group using SBAC.

Please click Accept as Solution to acknowledge that the answer to your question has been provided.