Listed below are the default user roles and their permissions.
Case Rights - Permissions | Case Reviewer | Project/Case Administrator | Application Administrator |
Create a Case | X | X | |
Delete a Case | X | X | |
Remove Evidence | X | X | |
Insert/Process Evidence | X | X | |
Add a Bookmark | X | X | X |
Modify a Bookmark | X | X | X |
Delete a Bookmark | X | X | X |
Re-Assign An Object's Categorization | X | X | |
View All Bookmarks | X | X | |
Add Labels | X | X | X |
Delete a Label | X | X | X |
Modify Labels | X | X | X |
Assign a Label | X | X | X |
Un-Assign a Label | X | X | X |
Edit Fuzzy Hash | X | X | |
Find Similar (Fuzzy Hash) | X | X | |
Add a Filter | X | X | |
Delete a Filter | X | X | |
Modify a Filter | X | X | |
Import a Filter | X | X | |
Export a Filter | X | X | |
Apply a Filter | X | X | X |
Do Index Search | X | X | X |
Delete An Index Search | X | X | X |
View All Indexed Searches | X | X | |
Delete Any Indexed Search | X | X | |
Perform a Live Search | X | X | |
Delete a Live Search | X | X | |
View All Live Searches | X | X | |
Delete Any Live Search | X | X | |
Mark As Ignored | X | X | |
View Ignored Data | X | X | |
Mark As Privileged | X | X | |
View Privileged Data | X | X | |
View Raw Data In Image | X | X | |
Set Case Processing Options | X | X | |
Manually Carve Items | X | X | X |
Decrypt | X | X | |
Export Evidence Data | X | X | |
Create a Report | X | X | X |
Launch Other Applications | X | X | |
Manage Remote Evidence | X | X | |
Import Memory Dump | X | X | |
Create a Report On Volatile Data | X | X | X |
Unmount Agent | X | X | |
Execute Arbitrary SQL |
| X | |
Map Image To Drive Letter | X | X | |
Add/Remove Custom Column Data | X | X | |
Manage Label Groups For Cases | X | X | |
Export Case Metadata (Copy Special etc.) | X | X | X |
Agent - Acquire | X | X | |
Agent - Drive Preview | X | X | |
Agent - Remediation | X | X | |
Agent - Push |
| X | X |
View Jobs |
|
| X |
Configuration Rights - Permissions | Case Reviewer | Project/Case Administrator | Application Administrator |
Configure the Processing Engine | X | ||
Set the Temporary Files Directory | X | X | X |
Specify a Network License Service | X | X | X |
Modify the Objects Checkbox State to Checked on | X | X | X |
Manage Custom Identifiers/Extension Mappings |
| X | X |
Manage Shared Labels |
|
| X |
Manage Shared Filters |
|
| X |
Manage Shared Custom Carvers |
|
| X |
Manage Shared Column Settings |
|
| X |
Manage Shared Label Groups |
|
| X |
Manage Shared Custom Identifiers |
|
| X |
Manage Profiles |
|
| X |
Add Data Sources |
|
| X |
Delete Data Sources |
|
| X |
Create Custodians |
|
| X |
Delete Custodians |
|
| X |
Approve Jobs |
|
| X |
Create Jobs |
|
| X |
Delete Jobs |
|
| X |
Execute Jobs |
|
| X |
Initiate Processing |
|
| X |
Administrator Rights - Permissions | Case Reviewer | Project/Case Administrator | Application Administrator |
Create a User | X | ||
Disable or enable a User |
|
| X |
Modify a User and Their Initial Roles |
|
| X |
Reset Passwords |
|
| X |
Manage Database Sessions |
| X | X |
Configure Database |
|
| X |
Manage KFF Entries, Sets and Statuses |
| X | X |
Add a Role |
|
| X |
Delete a Role |
|
| X |
Modify a Role |
|
| X |
Create Audit Reports |
| X | X |
Export Roles |
|
| X |
Manage Job Templates |
|
| X |
Case Management Rights - Permissions | Case Reviewer | Project/Case Administrator | Application Administrator |
Modify Additional User Roles for a Case |
| X | X |
Add a User to a Case |
| X | X |
Remove a User From a Case |
| X | X |
Modify Information About a Case |
| X | X |
Archive and Backup a Case |
| X | X |
Restore a Case from a Backup or an Archive |
| X | X |
Restore Image to Disk |
|
| X |
Copy a Case |
| X | X |
Merge the Case Indexes |
| X | X |