Listed below are the default user roles and their permissions. 


Case Rights - Permissions

Case Reviewer

Project/Case Administrator

Application Administrator

Create a Case


X

X

Delete a Case


X

X

Remove Evidence


X

X

Insert/Process Evidence


X

X

Add a Bookmark

X

X

X

Modify a Bookmark

X

X

X

Delete a Bookmark

X

X

X

Re-Assign An Object's Categorization


X

X

View All Bookmarks


X

X

Add Labels

X

X

X

Delete a Label

X

X

X

Modify Labels

X

X

X

Assign a Label

X

X

X

Un-Assign a Label

X

X

X

Edit Fuzzy Hash


X

X

Find Similar (Fuzzy Hash)


X

X

Add a Filter


X

X

Delete a Filter


X

X

Modify a Filter


X

X

Import a Filter


X

X

Export a Filter


X

X

Apply a Filter

X

X

X

Do Index Search

X

X

X

Delete An Index Search

X

X

X

View All Indexed Searches


X

X

Delete Any Indexed Search


X

X

Perform a Live Search


X

X

Delete a Live Search


X

X

View All Live Searches


X

X

Delete Any Live Search


X

X

Mark As Ignored


X

X

View Ignored Data


X

X

Mark As Privileged


X

X

View Privileged Data


X

X

View Raw Data In Image


X

X

Set Case Processing Options


X

X

Manually Carve Items

X

X

X

Decrypt


X

X

Export Evidence Data


X

X

Create a Report

X

X

X

Launch Other Applications


X

X

Manage Remote Evidence


X

X

Import Memory Dump


X

X

Create a Report On Volatile Data

X

X

X

Unmount Agent


X

X

Execute Arbitrary SQL


 

X

Map Image To Drive Letter


X

X

Add/Remove Custom Column Data


X

X

Manage Label Groups For Cases


X

X

Export Case Metadata (Copy Special etc.)

X

X

X

Agent - Acquire


X

X

Agent - Drive Preview


X

X

Agent - Remediation


X

X

Agent - Push

 

X

X

View Jobs

 

 

X

 

Configuration Rights - Permissions

Case Reviewer

Project/Case Administrator

Application Administrator

Configure the Processing Engine



X

Set the Temporary Files Directory

X

X

X

Specify a Network License Service

X

X

X

Modify the Objects Checkbox State to Checked on

X

X

X

Manage Custom Identifiers/Extension Mappings

 

X

X

Manage Shared Labels

 

 

X

Manage Shared Filters

 

 

X

Manage Shared Custom Carvers

 

 

X

Manage Shared Column Settings

 

 

X

Manage Shared Label Groups

 

 

X

Manage Shared Custom Identifiers

 

 

X

Manage Profiles

 

 

X

Add Data Sources

 

 

X

Delete Data Sources

 

 

X

Create Custodians

 

 

X

Delete Custodians

 

 

X

Approve Jobs

 

 

X

Create Jobs

 

 

X

Delete Jobs

 

 

X

Execute Jobs

 

 

X

Initiate Processing

 

 

X

 

 

Administrator Rights - Permissions

Case Reviewer

Project/Case Administrator

Application Administrator

Create a User



X

Disable or enable a User

 

 

X

Modify a User and Their Initial Roles

 

 

X

Reset Passwords

 

 

X

Manage Database Sessions

 

X

X

Configure Database

 

 

X

Manage KFF Entries, Sets and Statuses

 

X

X

Add a Role

 

 

X

Delete a Role

 

 

X

Modify a Role

 

 

X

Create Audit Reports

 

X

X

Export Roles

 

 

X

Manage Job Templates

 

 

X

 

 

Case Management Rights - Permissions

Case Reviewer

Project/Case Administrator

Application Administrator

Modify Additional User Roles for a Case

 

X

X

Add a User to a Case

 

X

X

Remove a User From a Case

 

X

X

Modify Information About a Case

 

X

X

Archive and Backup a Case

 

X

X

Restore a Case from a Backup or an Archive

 

X

X

Restore Image to Disk

 

 

X

Copy a Case

 

X

X

Merge the Case Indexes

 

X

X