The Permission enumerated list includes various settings.

Deprecated: 1.120

The ChangeTriggersAndAction enum value has been deprecated in LogScale version 1.120 and will be removed in version 1.136.

Table: Permission

ValuesTypeRequired[a]DefaultDescription
ChangeUserAccessbooleanyes Allow adding or removing existing users or groups to the view or repository.
ChangeTriggersAndActionsbooleanyes Permission to administer alerts, scheduled searches and actions.
ChangeDashboardsbooleanyes Allow creating and updating dashboards.
ChangeDashboardReadonlyTokenbooleanyes Allow users to change dashboard read-only token.
ChangeFilesbooleanyes Allow creating and updating uploaded CSV files.
ChangeInteractionsbooleanyes Allow changing of interactions.
ChangeParsersbooleanyes Allow creating and updating parsers.
ChangeSavedQueriesbooleanyes Allow creating and updating saved queries.
ConnectViewbooleanyes Allow creation of views that involve connecting to this repository.
ChangeDataDeletionPermissionsbooleanyes Special permission needed to be able to assign the permissions (DeleteEvents, DeleteDataSources, DeleteRepositoryOrView and ChangeRetention).
ChangeRetentionbooleanyes Allow changing retention on a repository.
ChangeDefaultSearchSettingsbooleanyes Allow editing the default search query and time interval.
ChangeS3ArchivingSettingsbooleanyes Allow editing the configuration for S3 archiving.
DeleteDataSourcesbooleanyes Allow deleting individual data sources in a repository.
DeleteRepositoryOrViewbooleanyes Allow deletion of repositories and views.
DeleteEventsbooleanyes The ability to be able to delete events.
ReadAccessbooleanyes Permit read only access.
ChangeIngestTokensbooleanyes Allow creating and editing ingest tokens.
ChangePackagesbooleanyes Allow installing packages etc.
ChangeViewOrRepositoryDescriptionbooleanyes Allow the change of view or repository descriptions.
ChangeConnectionsbooleanyes Allows changing connections for a view or repository.
EventForwardingbooleanyes Permission to administer event forwarding rules.
QueryDashboardbooleanyes Allow a dashboard to be queries.
ChangeViewOrRepositoryPermissionsbooleanyes Allow the user to change the permissions for views and repositories.
ChangeFdrFeedsbooleanyes Allow the user to change FDR feeds.
OrganizationOwnedQueriesbooleanyes Allow for organization owned queries.
ReadExternalFunctionsbooleanyes Whether external functions may be read.
ChangeIngestFeedsbooleanyes Whether the user may change ingest feeds.

[a] Some arguments may be required, as indicated in this column. For some fields, this column indicates that a result will always be returned for it.