CxSAST / CxOSA Roles and Permissions

Scanner

Permissions to create and manage projects, and run scans

save-sast-scan

save-osa-scan

open-issue-tracking-tickets

save-project

create-project

view-failed-sast-scan

download-scan-log

see-support-link

Reviewer

Read-only permissions to view scan results and generate reports

manage-result-comment

manage-data-analysis-templates

generate-scan-report

export-scan-results

see-support-link

Auditor

Permissions to manage vulnerability queries and use CxAudit

use-cxaudit

create-preset

update-and-delete-preset

manage-custom-description

save-sast-scan

save-project

Results Updater

Permissions to update the properties of scan results

manage-results-state-and-assignee

manage-result-comment

manage-result-severity

Results Verifier

Permissions to set the state of scan results to "Not Exploitable"

manage-result-exploitability

Data Cleaner

Permissions to delete projects and scans

delete-sast-scan

delete-project

SAST Admin

Full permissions

All SAST permissions, excluding use-cxaudit

manage-authentication-providers

General/Access Control

Manage authentication providers

manage-clients

General/Access Control

Manage clients and their settings

manage-roles

General/Access Control

Manage custom roles

manage-system-settings

General/Access Control

Manage general system settings

manage-users

General/Access Control

Manage Users

save-sast-scan

Projects & Scans

delete-sast-scan

Projects & Scans

save-project

Projects & Scans

delete-project

Projects & Scans

Delete project

view-failed-sast-scan

Projects & Scans

View faild scans

save-osa-scan

Projects & Scans

Run CxOSA scan

download-scan-log

Projects & Scans

Download scan log

manage-result-assignee

Scan Results

Assign user

manage-result-comment

Scan Results

Add new result comment

manage-result-severity

Scan Results

Change result severity

open-issue-tracking-tickets

Scan Results

Create ticket for result

export-scan-results

Scan Results

Export scan results

view-results

Scan Results

This permission separates the view-results ability from any other permission.

This is added to any predefined role and is available from CxSAST 9.0 HF5.

set-result-state-to-verify

Scan Results

Set the result state to Verify

set-result-state-notexploitable

Scan Results

Set the result state to Not Exploitable

set-result-state-confirmed

Scan Results

Set the result state to Confirmed

set-result-state-urgent

Scan Results

Set the result state to Urgent

set-result-state-proposednotexploitable

Scan Results

Set the result state to Proposed Not Exploitable

manage-data-analysis-templates

Reports

create and delete templates

generate-scan-report

Reports

Generate scan reports

export-scan-results

Reports

Export to CSV from the results viewer

manage-custom-description

Vulnerability Queries

Manage custom query descriptions (create, export and import)

create-preset

Vulnerability Queries

Create a new preset, save it, update it, delete it

manage-queries

Vulnerability Queries

Created and manage queries customization in the CxAudit

update-and-delete-preset

Vulnerability Queries

Edit and delete all presets (including Cx out-of-the-box presets)

use-cxaudit

Vulnerability Queries

Login to CxAudit

Note: This permission is counted against the license.

manage-data-retention

System Configuration

Manage data retention

manage-engine-servers

System Configuration

Manage engine servers

manage-system-settings

System Configuration

manage-external-services-settings

System Configuration

Configure external service settings

manage-custom-fields

System Configuration

Create/update/delete custom fields

manage-issue-tracking-systems

System Configuration

Manage issue-tracking system

manage-pre-post-scan-actions

System Configuration

Configure pre- and post-scan actions

download-system-logs

System Configuration

View installation details page

Download application logs

Note: only available from 9.0 HF1

view-appsec-coach-statistics

System Configuration

Ability to set the Codebashing integration

use-odata

API

Fetch all data via OData API (no filter per current user's team)

see-support-link

Other

View and use "Services & Support" button

manage-global-policies-settings

Security Risk Management

Manage Global Policies Settings

manage-policies

Security Risk Management

Manage Policies

manage-remediation-intelligence

Security Risk Management

Manage Remediation Intelligence

view-analytics

Security Risk Management

View Analytics