Trying to setup a SentinelOne connector, but there is no Setup Guide for it. Is there a list of required permissions somewhere?
Permissions are dependent upon the action you want to perform, but that is not an InsightConnect requirement, that is a SentinelOne requirement.
You can either use a service user, or a console user. If the action you want to perform with the user is exclusive to Isolating an asset, then you would only need that single permission, as well as the account or site level permissions to reach the asset in question.
If you need further assistance please don’t hesitate to respond here and we can go into further details.
Thank you.
Ya, I understand the concept. I was just hoping to not have to develop the action to permission mapping myself. Thanks anyway.