Skip to content
Looking for the Security Operations help?

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/fusion/customer/help/en-us/index.html?contextId=role-management-InterceptX

Administration roles for Sophos XDR

Administrators can do more if they have Sophos XDR.

Super Admin and Admin

Administrators with these roles can do these additional tasks:

  • View the intelligence report.
  • Request the intelligence report
  • Add items to the “Clean and Block” list.
  • Remove items from the “Clean and Block” list.
  • View blocked items.
  • Request an on-demand threat graph.
  • View on-demand threat graphs.
  • Isolate and un-isolate devices.
  • Request a forensic snapshot.

Help Desk

Administrators with this role can do these additional tasks:

  • View the intelligence report.
  • Request the intelligence report.
  • View blocked items.
  • Request an on-demand threat graph.
  • View on-demand threat graphs.
  • Request a forensic snapshot.

Read-only

Administrators with this role can do these additional tasks:

  • View the intelligence report.
  • View blocked items.
  • View on-demand threat graphs.