You are here: Administrator's functions > Managing RCS login > Privilege data

Privilege data

Administrator authorizations

Following is a description of the authorizations assigned to Administrators:

Data Description

User and group administration

Enables the Accounting section.

NOTE: users with this authorization can naturally change their own and others' authorizations.

Operation management

Enables Operations management.

Target management

Enables target management.

Audit management

Enables the Audit section.

Change license

Allows the license to be updated.

System administrator authorizations

Following is a description of the authorizations assigned to System Administrators:

Data Description

Frontend management

Enables the System, Frontend section.

Backend management

Enables the System, Backend section.

System backup and restore

Enables the System, Backup section.

Network Injector management

Enables the System, Network Injector section.

Connector management

Enables the Connectors section.

Technician authorizations

Following is a description of the authorizations assigned to Technicians:

Data Description

Factory build

Allows factories to be created and set.

Injection vector build

Allows installation vectors to be compiled.

Agent configuration

Allows agent configurations to be edited.

Run commands on an agent

Allows commands to be run on agents.

Upload file to agent

Allows files to be sent to agent.

Import evidence

Allows evidence to be imported

Network Injector rule management

Allows rules to be added for Network Injectors.

Analyst authorizations

Following is a description of the authorizations assigned to Analysts

Data Description

Alert build

Allows alert rules to be created.

Explore agent file system

Allows the agent's file system to be browsed.

Edit evidence

Allows priorities to be assigned to evidence and notes added.

Delete evidence

Allows evidence to be deleted.

NOTE: this authorization is never enabled by default since it requires a user license.

Export evidence

Allows evidence to be exported

Entity management

Allows intelligence entities to be managed.

RCS9.5 | User manual | © COPYRIGHT 2014