Back to Blogs
Enterprise EDR Access Level Changes
Enterprise EDR Access Level Changes
Posted on July 22, 2020
Overview
There are changes to a few permissions that have been made to remove the ThreatHunter reference. This change comes following the renaming of ThreatHunter to Enterprise EDR. The permissions name changes are only visual and will have no effect on existing API keys which utilize the old permission names. If you need to create a new Access Level or API Key make sure to look for the following permissions.
Access Level Changes
The following permissions are changing:
threathunter.events–>org.search.eventsthreathunter.feeds–>org.feedsthreathunter.watchlists–>org.watchlists
The APIs that are affected by the permission changes are:
| Category | Permission | API |
|---|---|---|
| Search | org.search.events |
Process Search v1, Process Search v2 |
| Custom Detections | org.feeds |
Feed Manager, Feed Search |
| Custom Detections | org.watchlists |
Watchlist API |