Administration Roles for Intercept X with EDR

Administrators can do more if they have Intercept X with EDR.

Super Admin and Admin

Administrators with these roles can also:

• View the intelligence report.
• Request the intelligence report
• Add items to the “Clean and Block” list.
• Remove items from the “Clean and Block” list.
• View blocked items.
• Request an on-demand threat case.
• View on-demand threat cases.
• Isolate and un-isolate devices.
• Request a forensic snapshot.
• Request a threat search.
• View a saved threat search.

Help Desk

Administrators with this role can also:

• View the intelligence report.
• Request the intelligence report.
• View blocked items.
• Request an on-demand threat case.
• View on-demand threat cases.
• Request a forensic snapshot.
• Request a threat search.
• View a saved threat search.

Read-only

Administrators with this role can also:

• View the intelligence report.
• View blocked items.
• View on-demand threat cases.
• View a saved threat search.