Skip to main content
  • EN

We are attempting to get more of our team involved in managing certain aspects of Netskope.  As such, they would like to have access to Advanced Analytics in order to create and maintain dashboards and generate reports.  They would only need Read access to the main management console of Netskope.  I am trying to determine if any of the existing roles would work for this purpose, and which one would give them what they need with the minimum privs required for the task.  I am thinking one of these three may work;

  • Restricted Admin: Has read-only access to all functions.
  • Cloud Intelligence Analyst: Has access only to reporting and analytics.
  • Application Risk Analyst: Can run reports and analytics and read the CCI.

I wasn’t able to find an article that broke down the roles into great detail, but please let me know if I missed that.  If App Risk Analyst will let them at least view policies or SkopeIt, that may be enough.  But if it literally only lets them run reports in AA, then I may need one of the roles above that.  Unless none of these roles provide both full functionality in AA with ReadOnly access everywhere else.

Hi ​@MSpalding ,

 

Thank you for posting your questions, ​@Aaron_Zhang could you please help or guide us here on the next steps.

Hi ​@MSpalding ,

Currently we don’t have any documentation that provides detailed descriptions of all user roles. Please reach out to your Netskope account team for recommendations on this topic. 

Feel free to let us know if you have any other questions. Thanks!

Best,

Aaron

 

-- cc ​@Rohit_Bhaskar 

That is disappointing.  I’ll figure it out on my own through trial and error, I guess.

Hi ​@MSpalding ,

As an alternative solution, you can drill into the predefined user roles to view more details such as functional areas, page permission, and sensitive data control. 

You can also create a custom user role by following the best practices below:

This will allow you to assign appropriate page permission & data access to your users.

Best,

Aaron

Thank you.  I would definitely prefer to use a predefined role if one fits the bill.  I will start there.  Worst case, I will create a custom role, but we are trying to keep that to a minimum due to auditing purposes.  Thanks for the follow up.

Reply


Terms & ConditionsCookie settings