Built-in roles - User Guide - BlueCat Horizon

BlueCat Horizon User Guide
ft:locale
en-US
Product name
BlueCat Horizon

BlueCat Horizon provides a predefined list of built-in roles that you can assign to users and groups for the management of various types of access. Built-in roles cannot be edited. These built-in roles include the following:

Role name Permissions Application
Platform Admin
  • Add, edit, delete, and view SIEM configurations
  • Add, edit, delete, and view SSO configurations
  • Edit, delete, or view root user
  • Edit, delete, or view settings
  • View audit log
  • View license
 Platform
IAM Admin
  • Add, view, update, delete users
  • Add, view, update, delete API tokens
  • Add, view, update, delete groups
  • Assign groups and roles to users
  • Assign users and groups to roles
  • Check effective access
  • Terminate user sessions
 Platform
IAM Viewer
  • View users, groups, roles, API tokens
  • Check effective access
 Platform
Auditor
  • View all types of activity logs
  • View limited information about SIEM integration
 Platform
Connection Admin
  • Add, view, update, delete connections from the Connection hub
 Platform
DDI Administrators
  • Cloud service and network permissions
    • Add network
    • Administer cloud service
    • Edit cloud service properties
    • Delete cloud network
    • View cloud service
    • View cloud service history
  • Device permissions
    • Administer devices
  • DHCP permissions
    • Add DHCP group
    • Add DHCP scope
    • Administer and view DHCP service
    • Disable scope
    • Edit and view scope options
    • Edit DHCP exclusions
    • Edit DHCP pools
    • Edit DHCP reservations
    • Edit DHCP service class
    • Edit DHCP service options
    • Edit DHCP service properties
    • Release leases
    • View DHCP service class
    • View DHCP service history
    • View DHCP service options
  • DNS permissions
    • Administer and view DNS service
    • Allow IP addresses in DNS
    • Clear DNS service log
    • Edit DNS service options
    • Edit DNS service properties
    • View DNS service history
    • View DNS service log
  • History permissions
    • View history
  • Import permissions
    • Import data
  • Network permissions
    • Add sub-range
    • Administer, delete, and view IP ranges
    • Edit cloud network properties
    • Edit IP address properties
    • Edit network properties
    • Edit range properties
    • View IPAM
    • View IP range history
    • View network
    • View network history
  • Organization permissions
    • Delete and edit organization
    • View organization
    • View organization history
  • Records permissions
    • Allow multiple host records per IP
    • Disable other records
    • Disable and edit wildcard records
    • Disable zone apex records
    • Edit apex records
    • Edit other records
  • Zone permissions
    • Add non primary zones
    • Delete, disable, and view zone
    • Edit zone options
    • Edit zone properties
    • View zone history
 DDI orchestrator
DHCP Administrators
  • DHCP permissions
    • Add DHCP group
    • Add DHCP scope
    • Administer DHCP service
    • Disable scope
    • Edit DHCP exclusions
    • Edit DHCP pools
    • Edit DHCP reservations
    • Edit DHCP service class
    • Edit DHCP service options
    • Edit DHCP service properties
    • Edit scope options
    • Release leases
    • View DHCP service
    • View DHCP service class
    • View DHCP service history
    • View DHCP service options
    • View scope options
  • Network permissions
    • Add sub-range
    • Administer IP ranges
    • Allow IP in DNS
    • Delete range
    • Edit IP address properties
    • Edit range properties
    • View IP range history
    • View IP ranges
    • View IPAM
  • Organization permissions
    • Delete organization
    • Edit organization
    • View organization
    • View organization history
  • Records permissions
    • Allow multiple host records per IP
 DDI orchestrator
DNS Administrators
  • Organization permissions
    • Delete organization
    • Edit organization
    • View organization
    • View organization history
  • Records permissions
    • Disable other records
    • Disable wildcard records
    • Disable zone apex records
    • Edit apex records
    • Edit other records
    • Edit wildcard records
  • Service permissions
    • Administer DNS service
    • Clear DNS service log
    • Edit DNS service options
    • Edit DNS service properties
    • View DNS service
    • View DNS service history
    • View DNS service log
  • Zone permissions
    • Add non primary zones
    • Add primary zones
    • Delete zone
    • Disable zone
    • Edit zone options
    • Edit zone properties
    • View DNS
    • View zone
    • View zone history
 DDI orchestrator
DNS Viewers
  • View DNS services
 DDI orchestrator
IPAM Administrators
  • Cloud service permissions
    • Administer cloud service
    • Delete cloud network
    • Edit cloud network properties
    • View cloud service
    • View cloud service history
  • Device permissions
    • Administer devices
  • DHCP permissions
    • Add DHCP group
    • Add DHCP scope
    • Disable scope
    • Edit DHCP exclusions
    • Edit DHCP pools
    • Edit DHCP reservations
    • Edit scope options
    • Release leases
    • View scope options
  • Networks permissions
    • Add network
    • Add sub-range
    • Administer IP ranges
    • Allow IP in DNS
    • Delete range
    • Edit IP address properties
    • Edit network properties
    • Edit range properties
    • Ping IP addresses
    • View IP range history
    • View IP ranges
    • View IPAM
    • View network
    • View network history
  • Organization permissions
    • Delete organization
    • Edit organization
    • View organization
    • View organization history
  • Records permissions
    • Allow multiple host records per IP
 DDI orchestrator
IPAM Viewers
  • View DHCP service class data
  • View DHCP service options
  • View DHCP services
  • View IP ranges
  • View IPAM
 DDI orchestrator