SOAR 権限を IAM にマッピングする

以下でサポートされています。

Google SecOps SOAR

SOAR の以前の権限を IAM 権限にマッピングする

このドキュメントでは、以前の Google Security Operations SOAR 権限を Google Cloud IAM 権限にマッピングします。このマッピングを使用して、以前の SOAR 権限モデルから移行する際に、Google SecOps SOAR のアクセスと機能を管理します。

以下のセクションでは、SOAR の以前の権限名（アクション）を一覧表示し、そのアクションにマッピングされている必要な Cloud IAM 権限を示します。

重要: SOAR の以前の権限名（アクション）には、常に IAM 権限の完全なリストを付与してください。

このドキュメントの Google Cloud IAM 権限のリストは、各アクションを機能させるために必要な最小限のセットです。アクションが正しく機能し、関連するコンソール要素（タブやボタンなど）が想定どおりに表示されるようにするには、そのアクションにリストされているすべての権限を付与する必要があります。

すべてのロールに必要な権限

環境内のすべてのユーザーには、プラットフォームのアクセス性とシステム機能のために、次の Cloud IAM 権限が必要です。これらの権限により、インターフェースのレンダリング、設定の管理、認証トークンの生成を行うことができます。

"chronicle.dataAccessScopes.list",
"chronicle.preferenceSets.get",
"chronicle.preferenceSets.update",
"chronicle.instances.get",
"chronicle.socRoles.get",
"chronicle.userNotifications.get",
"chronicle.userLocalizations.get",
"chronicle.moduleSettings.rebranding",
"chronicle.integrations.get",
"chronicle.legacySoarAdvancedReports.get",
"chronicle.environmentGroups.get",
"chronicle.moduleSettingsProperties.get",
"chronicle.legacySoarUsers.get"

ハンドブックを表示する権限

ハンドブックを表示するには、次の権限が必要です。

"chronicle.soarNetworks.get",
"chronicle.environments.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.legacySoarDashboards.get",
"chronicle.involvedEntities.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.integrationActions.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.integrationLogicalOperatorRevisions.get",
"chronicle.integrationLogicalOperators.get"

ハンドブックを編集する権限

ハンドブックの編集を許可するには、次の権限が必要です。

"chronicle.soarNetworks.get",
"chronicle.environments.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarDashboards.get",
"chronicle.involvedEntities.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.integrationActions.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.emailTemplates.get",
"chronicle.legacyPlaybooks.update",
"chronicle.legacyPlaybooks.delete",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.import",
"chronicle.legacySoarSettings.get",
"chronicle.legacySoarSettings.update"

フォルダを管理する権限

フォルダの管理を許可するには、次の権限が必要です。

"chronicle.soarNetworks.get",
"chronicle.environments.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarDashboards.get",
"chronicle.involvedEntities.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.integrationActions.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.emailTemplates.get",
"chronicle.legacyPlaybooks.import",
"chronicle.legacySoarSettings.get",
"chronicle.legacySoarSettings.update",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.update",
"chronicle.legacyPlaybooks.delete"

レスポンス統合を表示する権限

レスポンス統合を表示するには、次の権限が必要です。

"chronicle.legacyPlaybooks.get",
"chronicle.legacySoarSettings.get",
"chronicle.marketplaceIntegrations.get",
"chronicle.contentPacks.get",
"chronicle.contentPacks.export",
"chronicle.integrations.get",
"chronicle.integrationInstances.get",
"chronicle.integrationActions.get"

統合、パワーアップ、それらのインスタンスを管理する権限

統合、パワーアップ、およびそれらのインスタンスを管理（インストール、削除、構成、編集など）するには、次の権限が必要です。

"chronicle.legacyPlaybooks.get",
"chronicle.legacySoarSettings.get",
"chronicle.marketplaceIntegrations.get",
"chronicle.contentPacks.export",
"chronicle.integrations.get",
"chronicle.integrationActions.get",
"chronicle.contentPacks.get",
"chronicle.contentPacks.delete",
"chronicle.contentPacks.create",
"chronicle.contentPacks.install",
"chronicle.integrationInstances.get",
"chronicle.integrationInstances.update",
"chronicle.integrationInstances.delete"

ジョブを表示するための権限

ジョブを表示するには、次の権限が必要です。

"chronicle.jobInstances.get",
"chronicle.jobInstanceLogs.get",
"chronicle.remoteAgents.get",
"chronicle.jobs.get"

ジョブを編集する権限

ジョブの編集を許可するには、次の権限が必要です。

"chronicle.jobInstanceLogs.get",
"chronicle.remoteAgents.get",
"chronicle.jobInstances.get",
"chronicle.jobInstances.update",
"chronicle.jobInstances.delete",
"chronicle.jobInstances.run"

設定を表示する権限

設定を表示するには、次の権限が必要です。

"chronicle.slaDefinitions.get",
"chronicle.requestTemplates.get",
"chronicle.propertySchemaDefinitions.get",
"chronicle.soarNetworks.get",
"chronicle.environments.get",
"chronicle.dynamicParameters.get",
"chronicle.emailTemplates.get",
"chronicle.soarDomains.get",
"chronicle.customLists.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.alertGroupingRules.get",
"chronicle.legacySystem.getSystemVersion",
"chronicle.legacySystem.getMaximumDataRetentionValue",
"chronicle.legacyConfiguration.getMaximumAlertsGroupingConfiguration",
"chronicle.legacySoarSettings.get",
"chronicle.legacySoarAudits.legacySoarAudit",
"chronicle.formDynamicParameters.get",
"chronicle.customFields.get",
"chronicle.legacySoarIdpMappingGroups.get",
"chronicle.legacySoarUsers.get",
"chronicle.views.get",
"chronicle.moduleSettingsProperties.get",
"chronicle.caseTagDefinitions.get",
"chronicle.entitiesBlocklists.get",
"chronicle.visualFamilies.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.remoteAgents.get",
"chronicle.legacyPublisher.get",
"chronicle.calculatedFieldDefinitions.get",
"chronicle.enrichmentAgent.get",
"chronicle.legacySdk.get",
"chronicle.legacySoarPermissionGroups.get",
"chronicle.legacySystemMetadata.get",
"chronicle.legacySystemMetadata.placeholders",
"chronicle.moduleSettings.get",
"chronicle.notificationSettings.get",
"chronicle.systemNotifications.get"

設定を編集する権限

設定の編集を許可するには、次の権限が必要です。

"chronicle.legacySystem.getSystemVersion",
"chronicle.legacySystem.getMaximumDataRetentionValue",
"chronicle.legacyConfiguration.getMaximumAlertsGroupingConfiguration",
"chronicle.legacySoarAudits.legacySoarAudit",
"chronicle.views.get",
"chronicle.moduleSettingsProperties.get",
"chronicle.visualFamilies.get",
"chronicle.integrationInstances.get",
"chronicle.remoteAgents.get",
"chronicle.legacyPublisher.get",
"chronicle.socRoles.get",
"chronicle.socRoles.update",
"chronicle.socRoles.delete",
"chronicle.slaDefinitions.get",
"chronicle.slaDefinitions.update",
"chronicle.slaDefinitions.delete",
"chronicle.requestTemplates.get",
"chronicle.requestTemplates.update",
"chronicle.requestTemplates.delete",
"chronicle.propertySchemaDefinitions.get",
"chronicle.propertySchemaDefinitions.update",
"chronicle.propertySchemaDefinitions.delete",
"chronicle.soarNetworks.get",
"chronicle.soarNetworks.update",
"chronicle.soarNetworks.delete",
"chronicle.emailTemplates.get",
"chronicle.emailTemplates.update",
"chronicle.emailTemplates.delete",
"chronicle.soarDomains.get",
"chronicle.soarDomains.update",
"chronicle.soarDomains.delete",
"chronicle.customLists.get",
"chronicle.customLists.update",
"chronicle.customLists.delete",
"chronicle.caseStageDefinitions.get",
"chronicle.caseStageDefinitions.update",
"chronicle.caseStageDefinitions.delete",
"chronicle.caseCloseDefinitions.get",
"chronicle.caseCloseDefinitions.update",
"chronicle.caseCloseDefinitions.delete",
"chronicle.alertGroupingRules.get",
"chronicle.alertGroupingRules.update",
"chronicle.alertGroupingRules.delete",
"chronicle.legacySoarSettings.get",
"chronicle.legacySoarSettings.update",
"chronicle.dynamicParameters.get",
"chronicle.formDynamicParameters.get",
"chronicle.formDynamicParameters.update",
"chronicle.customFields.get",
"chronicle.customFields.update",
"chronicle.customFields.delete",
"chronicle.legacySoarUsers.get",
"chronicle.legacySoarUsers.delete",
"chronicle.environments.get",
"chronicle.environments.update",
"chronicle.legacySoarIdpMappingGroups.get",
"chronicle.legacySoarIdpMappingGroups.update",
"chronicle.legacySoarIdpMappingGroups.delete",
"chronicle.caseTagDefinitions.get",
"chronicle.caseTagDefinitions.update",
"chronicle.caseTagDefinitions.delete",
"chronicle.entitiesBlocklists.get",
"chronicle.entitiesBlocklists.update",
"chronicle.entitiesBlocklists.delete",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyCaseFederationPlatforms.update",
"chronicle.legacyCaseFederationPlatforms.delete",
"chronicle.calculatedFieldDefinitions.delete",
"chronicle.calculatedFieldDefinitions.update",
"chronicle.legacySdk.update",
"chronicle.moduleSettingsProperties.testSettings",
"chronicle.moduleSettingsProperties.update",
"chronicle.notificationSettings.update",
"chronicle.systemNotifications.update",
"chronicle.userLocalizations.update",
"chronicle.userNotifications.update"

環境を編集する権限

環境の編集を許可するには、次の権限が必要です。

"chronicle.slaDefinitions.get",
"chronicle.requestTemplates.get",
"chronicle.propertySchemaDefinitions.get",
"chronicle.soarNetworks.get",
"chronicle.emailTemplates.get",
"chronicle.soarDomains.get",
"chronicle.customLists.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.alertGroupingRules.get",
"chronicle.legacySystem.getSystemVersion",
"chronicle.legacySystem.getMaximumDataRetentionValue",
"chronicle.legacyConfiguration.getMaximumAlertsGroupingConfiguration",
"chronicle.legacySoarSettings.get",
"chronicle.legacySoarAudits.legacySoarAudit",
"chronicle.dynamicParameters.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFields.get",
"chronicle.legacySoarIdpMappingGroups.get",
"chronicle.legacySoarUsers.get",
"chronicle.views.get",
"chronicle.moduleSettingsProperties.get",
"chronicle.caseTagDefinitions.get",
"chronicle.entitiesBlocklists.get",
"chronicle.visualFamilies.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.remoteAgents.get",
"chronicle.legacyPublisher.get",
"chronicle.environments.get",
"chronicle.environments.update",
"chronicle.environments.delete",
"chronicle.environmentGroups.get",
"chronicle.environmentGroups.update",
"chronicle.environmentGroups.delete"

リモート エージェントを表示する権限

リモート エージェントを表示するには、次の権限が必要です。

"chronicle.remoteAgents.get",
"chronicle.legacyPublisher.get"

エージェントを編集する権限

エージェントの編集を許可するには、次の権限が必要です。

"chronicle.remoteAgents.get",
"chronicle.remoteAgents.update",
"chronicle.remoteAgents.delete",
"chronicle.legacyPublisher.get",
"chronicle.legacyPublisher.update"

ビューの権限

ビューを管理するには、次の権限が必要です。

"chronicle.views.get",
"chronicle.views.update"

コネクタを表示する権限

コネクタを表示するには、次の権限が必要です。

"chronicle.connectorInstances.get",
"chronicle.connectorInstanceLogs.get",
"chronicle.remoteAgents.get"

コネクタを編集する権限

コネクタの編集を許可するには、次の権限が必要です。

"chronicle.connectorInstanceLogs.get",
"chronicle.remoteAgents.get",
"chronicle.legacyCases.get",
"chronicle.legacyCases.ingest",
"chronicle.connectorInstances.update",
"chronicle.connectorInstances.delete",
"chronicle.connectorInstances.get"

Webhook を表示する権限

Webhook を表示するには、次の権限が必要です。

"chronicle.webhooks.get"

Webhook を編集する権限

Webhook の編集を許可するには、次の権限が必要です。

"chronicle.webhooks.get",
"chronicle.webhooks.update",
"chronicle.webhooks.delete"

ダッシュボードを表示する権限

ダッシュボードを表示するには、次の権限が必要です。

"chronicle.environments.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacySearches.searchCases",
"chronicle.legacySearches.searchEntities",
"chronicle.legacySoarSettings.get",
"chronicle.legacySoarDashboards.update",
"chronicle.legacySoarDashboards.get",
"chronicle.legacySoarUsers.get",
"chronicle.integrationInstances.get",
"chronicle.integrationActions.get",
"chronicle.legacyCaseFederationPlatforms.get"

ダッシュボードを編集する権限

ダッシュボードの編集を許可するには、次の権限が必要です。

"chronicle.environments.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacySearches.searchCases",
"chronicle.legacySearches.searchEntities",
"chronicle.legacySoarSettings.get",
"chronicle.legacySoarUsers.get",
"chronicle.integrationInstances.get",
"chronicle.integrationActions.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacySoarDashboards.update",
"chronicle.legacySoarDashboards.get",
"chronicle.legacySoarDashboards.delete"

SOAR 検索を表示する権限

SOAR 検索を表示するには、次の権限が必要です。

"chronicle.caseStageDefinitions.get",
"chronicle.legacySearches.searchEntities",
"chronicle.legacySearches.searchCases",
"chronicle.caseTagDefinitions.get"

ケース検索を表示する権限

ケース検索を表示するには、次の権限が必要です。

"chronicle.caseTagDefinitions.get",
"chronicle.caseStageDefinitions.get",
"chronicle.legacySearches.searchCases",
"chronicle.legacySearches.searchEntities"

検索アクションを許可する権限

検索アクションを許可するには、次の権限が必要です。

"chronicle.caseTagDefinitions.get",
"chronicle.caseStageDefinitions.get",
"chronicle.legacySearches.searchCases",
"chronicle.legacySearches.searchEntities",
"chronicle.cases.get",
"chronicle.cases.close",
"chronicle.cases.reopen",
"chronicle.cases.update"

ケースを表示する権限

ケースを表示するには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.cases.countPriorities",
"chronicle.cases.generateReport",
"chronicle.legacyFederatedCases.fetchCasesToSync",
"chronicle.legacySystemMetadata.placeholders"

Cases 2.0 を表示する権限

Cases 2.0 を表示するには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.caseDetections.get",
"chronicle.caseEvents.get",
"chronicle.views.get",
"chronicle.caseEvidenceDatas.get",
"chronicle.cases.countPriorities",
"chronicle.cases.generateReport",
"chronicle.enrichmentAgent.get",
"chronicle.legacyFederatedCases.fetchCasesToSync",
"chronicle.legacySystemMetadata.placeholders"

ケース管理アクションを許可する権限

ケース管理アクションを許可するには、次の権限が必要です。

"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFields.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.propertySchemaDefinitions.get",
"chronicle.propertySchemaDefinitions.update",
"chronicle.propertySchemaDefinitions.delete",
"chronicle.legacyCases.get",
"chronicle.legacyCases.ingest",
"chronicle.customFieldValues.get",
"chronicle.customFieldValues.update",
"chronicle.contextProperties.get",
"chronicle.contextProperties.update",
"chronicle.contextProperties.delete",
"chronicle.involvedEntities.get",
"chronicle.involvedEntities.update",
"chronicle.cases.get",
"chronicle.cases.update",
"chronicle.cases.updateTag",
"chronicle.cases.removeTag",
"chronicle.cases.close",
"chronicle.cases.reopen",
"chronicle.caseAlerts.get",
"chronicle.caseAlerts.metadataUpdate",
"chronicle.caseAlerts.move",
"chronicle.caseAlerts.removeTag",
"chronicle.caseAlerts.updateTag",
"chronicle.enrichmentAgent.execute",
"chronicle.legacyFederatedCases.batchPatchFederatedCases",
"chronicle.legacySystemMetadata.placeholders"

ケースのハンドブック タブを表示する権限

[ケースのハンドブック] タブを表示するには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.legacyPlaybooks.get"

ハンドブックを手動で関連付ける権限

ハンドブックを手動で接続できるようにするには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.legacyPlaybooks.update",
"chronicle.legacyPlaybooks.get"

アクションに対応するための権限

アクションへの応答を許可するには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.update"

関連付けられたハンドブックを再実行する権限

接続されたハンドブックの再実行を許可するには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.update"

ケースウォール タブを表示する権限

[ケースウォール] タブを表示するには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.legacyCases.get",
"chronicle.caseComments.get",
"chronicle.caseWallRecords.get",
"chronicle.caseWallRecords.update"

コメントや添付ファイルを追加、編集する権限

コメントや添付ファイルの追加と編集を許可するには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.legacyCases.get",
"chronicle.caseWallRecords.get",
"chronicle.caseWallRecords.update",
"chronicle.caseComments.get",
"chronicle.caseComments.update",
"chronicle.caseComments.delete"

ケースチャット メッセージをケースウォールに固定する権限

ケースチャット メッセージをケースウォールに固定できるようにするには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.legacyCases.get",
"chronicle.caseComments.get",
"chronicle.caseWallRecords.get",
"chronicle.caseWallRecords.update",
"chronicle.chatMessages.pin",
"chronicle.chatMessages.get"

ケース シミュレーションを許可する権限

ケース シミュレーションを許可するには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.legacyCases.importJson",
"chronicle.legacyCases.deleteSimulated",
"chronicle.legacyCases.simulate",
"chronicle.legacyCases.get",
"chronicle.legacyCases.exportJson",
"chronicle.legacyCases.createSimulated",
"chronicle.legacyCases.getSimulated"

アラートをテストケースとして取り込む権限

アラートをテストケースとして取り込むには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.legacyCases.get",
"chronicle.legacyCases.ingestAlertTestCase"

手動操作を実行する権限

手動操作を実行できるようにするには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.legacyCases.get",
"chronicle.legacyCases.runManualAction"

手動ケースを作成する権限

手動ケースの作成を許可するには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.legacyCases.get",
"chronicle.legacyCases.createManual",
"chronicle.legacyPlaybooks.get"

アクションに対応するための権限

アクションへの応答を許可するには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.update"

ケースチャットを許可する権限

ケースチャットを許可するには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.chatMessages.get",
"chronicle.chatMessages.create",
"chronicle.chatMessageAttachments.get",
"chronicle.instances.generateSoarChatMessage"

エンティティ プロパティを追加、編集する権限

エンティティ プロパティの追加と編集を許可するには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.involvedEntities.get",
"chronicle.involvedEntities.update"

ケースキュー フィルタを共有する権限

ケースキュー フィルタの共有を許可するには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.environments.get",
"chronicle.emailTemplates.get",
"chronicle.caseStageDefinitions.get",
"chronicle.caseCloseDefinitions.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.export",
"chronicle.legacySoarSettings.get",
"chronicle.formDynamicParameters.get",
"chronicle.customFieldValues.get",
"chronicle.customFields.get",
"chronicle.contextProperties.get",
"chronicle.legacySoarUsers.get",
"chronicle.connectorEvents.get",
"chronicle.involvedEntities.get",
"chronicle.cases.get",
"chronicle.caseAlerts.get",
"chronicle.tasks.get",
"chronicle.views.get",
"chronicle.caseTagDefinitions.get",
"chronicle.integrationInstances.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacyFederatedCases.get",
"chronicle.caseQueueFilters.update",
"chronicle.caseQueueFilters.get",
"chronicle.caseQueueFilters.delete",
"chronicle.shareConfigs.update"

エンティティ エクスプローラの権限

エンティティ エクスプローラを表示するには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.uniqueEntities.get"

コメントを追加する権限

エンティティ エクスプローラでコメントを追加できるようにするには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.uniqueEntities.get",
"chronicle.uniqueEntities.update"

エンティティ エクスプローラでエンティティ プロパティを追加、編集する権限

エンティティ エクスプローラでエンティティ プロパティを追加および編集できるようにするには、次の権限が必要です。

"chronicle.propertySchemaDefinitions.get",
"chronicle.uniqueEntities.get",
"chronicle.uniqueEntities.update"

Your Workdesk の権限

Your Workdesk を表示するには、次の権限が必要です。

"chronicle.requestTemplates.get",
"chronicle.legacySearches.searchCases",
"chronicle.legacySearches.searchEntities",
"chronicle.legacySoarUsers.get"

[マイタスク] の権限

Your Workdesk で [マイタスク] を表示するには、次の権限が必要です。

"chronicle.requestTemplates.get",
"chronicle.legacySearches.searchCases",
"chronicle.legacySearches.searchEntities",
"chronicle.legacySoarUsers.get",
"chronicle.tasks.get"

タスクを作成、編集する権限

タスクの作成と編集を許可するには、次の権限が必要です。

"chronicle.requestTemplates.get",
"chronicle.legacySearches.searchCases",
"chronicle.legacySearches.searchEntities",
"chronicle.legacySoarUsers.get",
"chronicle.tasks.get",
"chronicle.tasks.update",
"chronicle.tasks.delete"

お知らせの権限

Your Workdesk でお知らせを表示するには、次の権限が必要です。

"chronicle.requestTemplates.get",
"chronicle.legacySearches.searchCases",
"chronicle.legacySearches.searchEntities",
"chronicle.legacySoarUsers.get",
"chronicle.announcements.get"

お知らせを作成、編集する権限

お知らせの作成と編集を許可するには、次の権限が必要です。

"chronicle.requestTemplates.get",
"chronicle.legacySearches.searchCases",
"chronicle.legacySearches.searchEntities",
"chronicle.legacySoarUsers.get",
"chronicle.announcements.get",
"chronicle.announcements.update",
"chronicle.announcements.delete"

リクエストの権限

Your Workdesk でリクエストを表示するには、次の権限が必要です。

"chronicle.legacySearches.searchCases",
"chronicle.legacySearches.searchEntities",
"chronicle.legacySoarUsers.get",
"chronicle.requestTemplates.get"

保留中のアクションに対する権限

デスクで保留中のアクションを表示するには、次の権限が必要です。

"chronicle.requestTemplates.get",
"chronicle.legacySearches.searchCases",
"chronicle.legacySearches.searchEntities",
"chronicle.legacySoarUsers.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacyPlaybooks.update"

Workspace の権限

Your Workdesk でワークスペース機能を使用するには、次の権限が必要です。

"chronicle.requestTemplates.get",
"chronicle.legacySearches.searchCases",
"chronicle.legacySearches.searchEntities",
"chronicle.legacySoarUsers.get",
"chronicle.workdeskNotes.update",
"chronicle.workdeskNotes.get",
"chronicle.workdeskNotes.delete",
"chronicle.workdeskLinks.update",
"chronicle.workdeskLinks.get",
"chronicle.workdeskLinks.delete",
"chronicle.workdeskContacts.update",
"chronicle.workdeskContacts.get",
"chronicle.workdeskContacts.delete",
"chronicle.attachments.update",
"chronicle.attachments.get",
"chronicle.attachments.delete"

調査の権限

このセクションでは、調査タスクに関連する権限について説明します。

手動操作を実行する権限

調査中に手動操作を実行できるようにするには、次の権限が必要です。

"chronicle.legacyCases.get",
"chronicle.legacyCases.runManualAction"

調査でエンティティ プロパティを追加、編集する権限

調査中にエンティティ プロパティの追加と編集を許可するには、次の権限が必要です。

"chronicle.involvedEntities.get",
"chronicle.involvedEntities.update"

レポートの権限

レポートを表示するには、次の権限が必要です。

"chronicle.environments.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacySoarSettings.get",
"chronicle.legacySoarReports.get",
"chronicle.integrationInstances.get",
"chronicle.integrationActions.get",
"chronicle.legacyCaseFederationPlatforms.get"

レポートを編集する権限

レポートの編集を許可するには、次の権限が必要です。

"chronicle.environments.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacySoarSettings.get",
"chronicle.integrationInstances.get",
"chronicle.integrationActions.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacySoarDashboards.get",
"chronicle.legacySoarDashboards.update",
"chronicle.legacySoarReports.get",
"chronicle.legacySoarReports.update",
"chronicle.legacySoarReports.delete"

高度なレポートを表示する権限

高度なレポートを表示するには、次の権限が必要です。

"chronicle.environments.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacySoarSettings.get",
"chronicle.integrationInstances.get",
"chronicle.integrationActions.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacySoarAdvancedReports.get",
"chronicle.legacySoarReports.get"

高度なレポートを編集する権限

高度なレポートの編集を許可するには、次の権限が必要です。

"chronicle.environments.get",
"chronicle.legacyPlaybooks.get",
"chronicle.legacySoarSettings.get",
"chronicle.integrationInstances.get",
"chronicle.integrationActions.get",
"chronicle.legacyCaseFederationPlatforms.get",
"chronicle.legacySoarAdvancedReports.update",
"chronicle.legacySoarAdvancedReports.share",
"chronicle.legacySoarAdvancedReports.get",
"chronicle.legacySoarAdvancedReports.delete",
"chronicle.legacySoarReports.get",
"chronicle.legacySoarReports.update"

オントロジーの権限

オントロジーを表示するには、次の権限が必要です。

"chronicle.mappingRules.get",
"chronicle.ontologyRecords.get",
"chronicle.visualFamilies.get"

イベント設定画面を許可する権限

オントロジーのイベント構成画面にアクセスするには、次の権限が必要です。

"chronicle.mappingRules.get",
"chronicle.mappingRules.update",
"chronicle.mappingRules.delete",
"chronicle.ontologyRecords.get",
"chronicle.ontologyRecords.update",
"chronicle.visualFamilies.get",
"chronicle.visualFamilies.update",
"chronicle.visualFamilies.delete"

IDE の権限

IDE を使用するには、次の権限が必要です。

"chronicle.legacyPlaybooks.get",
"chronicle.legacySoarSettings.get",
"chronicle.legacySoarSettings.update",
"chronicle.marketplaceIntegrations.get",
"chronicle.marketplaceIntegrations.uninstall",
"chronicle.marketplaceIntegrations.install",
"chronicle.contentPacks.get",
"chronicle.contentPacks.delete",
"chronicle.contentPacks.create",
"chronicle.contentPacks.install",
"chronicle.contentPacks.export",
"chronicle.managers.update",
"chronicle.managers.get",
"chronicle.managers.delete",
"chronicle.managerRevisions.update",
"chronicle.managerRevisions.get",
"chronicle.managerRevisions.delete",
"chronicle.jobs.update",
"chronicle.jobs.get",
"chronicle.jobs.delete",
"chronicle.jobRevisions.get",
"chronicle.jobRevisions.update",
"chronicle.jobRevisions.delete",
"chronicle.integrations.update",
"chronicle.integrations.get",
"chronicle.integrations.delete",
"chronicle.integrationInstances.update",
"chronicle.integrationInstances.get",
"chronicle.integrationInstances.delete",
"chronicle.connectors.get",
"chronicle.connectors.update",
"chronicle.connectors.delete",
"chronicle.connectorRevisions.update",
"chronicle.connectorRevisions.delete",
"chronicle.connectorRevisions.get",
"chronicle.integrationActions.get",
"chronicle.integrationActions.update",
"chronicle.integrationActions.delete",
"chronicle.integrationActions.run",
"chronicle.integrationActionRevisions.update",
"chronicle.integrationActionRevisions.delete",
"chronicle.integrationActionRevisions.get",
"chronicle.integrationLogicalOperatorRevisions.delete",
"chronicle.integrationLogicalOperatorRevisions.get",
"chronicle.integrationLogicalOperatorRevisions.update",
"chronicle.integrationLogicalOperators.delete",
"chronicle.integrationLogicalOperators.execute",
"chronicle.integrationLogicalOperators.get",
"chronicle.integrationLogicalOperators.update",
"chronicle.transformerDefinitions.create",
"chronicle.transformerDefinitions.delete",
"chronicle.transformerDefinitions.execute",
"chronicle.transformerDefinitions.get",
"chronicle.transformerDefinitions.list",
"chronicle.transformerDefinitions.update",
"chronicle.transformerRevisions.delete",
"chronicle.transformerRevisions.get",
"chronicle.transformerRevisions.update"

すべての環境に対する権限

すべての環境を管理するには、次の権限が必要です。

"chronicle.environments.get",
"chronicle.environments.update",
"chronicle.environmentGroups.get",
"chronicle.environmentGroups.update",
"chronicle.environmentGroups.delete"

SLA の権限

このセクションでは、サービスレベル契約（SLA）に関連する権限について説明します。

SLA を一時停止して再開する権限

SLA の一時停止と再開を許可するには、次の権限が必要です。

"chronicle.cases.get",
"chronicle.cases.update",
"chronicle.caseAlerts.get",
"chronicle.caseAlerts.updateSla"