Types of user groups

Supported in:

Google secops SOAR

The Google Security Operations platform relies on user groups to define who can access and modify different parts of the platform. By assigning users to one of the following predefined groups, Google SecOps teams and Managed Security Service Providers (MSSPs) can make sure users have the necessary access to perform their security workflows, from viewing reports to building and executing playbooks.

This document introduces the predefined user groups and permission levels in Google SecOps.

The types of user groups and their permissions include:

• Standard users: Can be granted a range of permissions, including edit access to modules across the platform.
• View-Only users: Have read-only access to specific parts of the platform, depending on the assigned permissions.
• Collaborator users: Can be assigned permissions to view or edit specific platform modules.
• Managed Users: Have full case management permissions for Hybrid SOC models with the MSSP. They don't have access to edit playbooks.
• Managed-Plus users: Have the same full case management permissions as managed users, plus the ability to build and edit playbooks within their environment.

Note: Not all user groups are included in the basic license. You'll need to upgrade to the Enterprise license to have them all bundled as part of the package.

Need more help? Get answers from Community members and Google SecOps professionals.