BigPanda provides two built-in roles: Admin and User. These roles are configurable to define the level of access granted to your organization's BigPanda users. A user may have one or more roles, and each role may have one or more permissions associated with it. The same role can be duplicated and assigned to multiple users.

Role-Based Access Control (RBAC) in BigPanda allows you to dictate the level of a user's access to resources and is customizable by resource and role.

The two permission types provided by BigPanda are:

Read-only - the user can only view the resource, they cannot interact with or edit it in any way.
Full Access - the user has the ability to perform actions related to the resource (ie: Create, Read, Edit, Delete, etc.).
For more information about User Roles in BigPanda, see Roles and Resource Permissions.

Key Features

Create and customize roles to restrict the availability of your organization's sensitive content, making it accessible on a per-user basis.
Control the degree to which resources are available to select users within your organization.
Protect your organization's resources by enforcing the Principle of Least Privilege. Give users the lowest level of access required to perform their role, limiting the scope of any damage caused by issues with one resource.
The separation of duties provided by Role-Based Access Control localizes areas of access, providing very clear parameters for each user's responsibilities.

Relevant Permissions

Only users with Full access can grant role permissions for a newly created resource. Add Permissions_Full_Access for access to these permissions.

Role Name	Description
`Roles_Read`	Read-only - View the Role Management section.
`Roles_Full_Access`	Full access - View, add, edit and delete BigPanda Roles.

Create a New Role

In the top right, click the Settings cog icon, and then click Roles Management.
Click New Role.

Name the new role.
(Optional) Add Users, Permissions, and Environment Access to the role, as described below.

Field	Description
Role Name	Enter a unique role name.
Users	(Optional) Select the users to which this role will be added.
Permissions	(Optional) Add permissions to resources (other than environments). Permissions are divided into Read access (ie: `Dashboards_Read`) and Full access (ie: `Dashboards_Full_Access`).
Environment Access	Add permissions to environments. There are three global Environments permissions: `Environments_Full_Access` - full access to environment configuration and incident action for all environments. `Environments_Incident_Actions` - Access to all environments and the ability to perform incident actions (except for environment configuration). `Environments_Read_Only` - Read only access to all environments and incident actions. BigPanda also offers Granular Environment Permissions, allowing admins to assign access on a per-environment basis. To assign access to a specific environment, add the name of the environment to the permission you wish to assign (ie: `_Read`).

Click Create Role.

Edit a Role

In the top right, click the Settings cogwheel icon, and then click Roles Management.
Select a role and click Edit Role.

Edit the role's details and click Edit Role.

Duplicate a Role

In the top right, click the Settings cogwheel icon, and then click Roles Management.
Select a role and click Duplicate Role.

(Optional) Name the duplicated role and edit its Users, Permissions, and Environment Access to your new specifications.
Click Duplicate Role.

Delete a Role

In the top right, click the Settings cog icon, and then click Roles Management.
Click Delete Role.

Roles and Resource Permissions

BigPanda Role Based Access Control (RBAC) allows you to create custom roles that have granular access to sections and actions within BigPanda.

BigPanda Resource Permissions

Build roles within your organization using the permissions specific to each individual BigPanda resource.

BigPanda Feature	resource_type	Access levels
Alert View	Alert_view	View, create, and edit Alert Views in BigPanda Settings.
Analytics	analytics	View, edit, and create new dashboards in Analytics and assign the Dashboard Designer role.
API Keys	apikeys	View, edit, and create API keys BigPanda Settings.
Audit Log API Audit Log	audit_logs	View the Audit Log in BigPanda Settings and the Audit Lot API.
Changes	changes	View the Related Changes section within the incident details and mark changes as Suspect or Match.
Correlation Patterns	correlations	View, edit, and create new correlation patterns in BigPanda Settings.
	custom_tags	Not currently in use.
Dashboards	dashboards	View, customize, and interact with BigPanda Dashboards.
Alert Enrichment Enrichments API	enrichments enrichments-jobs	View and use the Alert Enrichments UI and API.
Manage Incident Enrichment	incident-tags-definitions	View, create, and edit incident tags in BigPanda Settings.
	integration_templates	Not currently in use.
Integrations	integrations	View, install, and edit integrations in the Integrations tab.
AutoShare	notifications	View, add, edit, and delete AutoShare rules in the BigPanda Settings.
	organizations	Not currently in use.
Maintenance Plans V1 API Maintenance Plans V2 API Manage Planned Maintenance Manage Alert Filtering	plans	View, create, edit, and delete maintenance plans or alert filters in BigPanda Settings.
Sharing Quotas	quotas	View and edit sharing rate limitations in BigPanda Settings.
Roles Management	roles	View, add, edit, and delete BigPanda Roles.
Schedules API	schedules	View and use the Schedules API to define the specific start and end times of Plans configured with the Plans V1 API.
Unified Search	search	Access Unified search and perform searches.
Single Sign-On	sso	View, select, and configure a Single Sign-on provider in BigPanda Settings.
Topology	topology	View, upload, or edit topology maps and view the Topology section in incident details.
Users	users	View, add, edit and delete Users in BigPanda Settings.

Granular Environment Permissions

BigPanda RBAC provides roles and permissions to control and manage access to different resources in BigPanda.
Granular RBAC applies exclusively to BigPanda Environments, defining permissions at the single environment level.
To set and assign Granular permissions, start with the name of the environment to which privileges will be assigned, followed by _Read and _Incident_Actions, ie: YourEnvironment_Read

🚧
Users must have access to at least one environment, either read-only or with actions, in order to be able to use BigPanda.

Environments Resource_type Details

Permission	Description
`environments Full_Access`	Read, edit and delete actions for all environments. Full access to all enrichment tags and incident actions (ie: assign, snooze, share, comment) in all environments.
`environments Incident_Actions`	Full access to all enrichment tags and incident actions (ie: assign, snooze, share, comment) minus environment configuration in all environments.
`environments Read`	Read-only access to all enrichment tags and incident actions (ie: assign, snooze, share, comment) in all environments without the ability to change or submit any new incident action.
`<ENV_NAME>_Incident_Actions`	Granular - Full access to all enrichment tags and incident actions (ie: assign, snooze, share, comment) minus environment configuration in the specified environment(s).
`<ENV_NAME>_Read`	Granular - Read-only access to all enrichment tags and incident actions (ie: assign, snooze, share, comment) in the specified environment(s) without the ability to change or submit any new incident action.

📘
Replace <ENV_NAME> with the relevant environment name.

Next Steps

Learn about User Management in BigPanda

Learn about Managing your personal account

Find your way around the BigPanda Settings page