Roles and Permissions

Learn how to configure permissions for custom Forescout Cloud account roles.

The default Admin and Operator accounts cannot be altered. The administrative umbrella account for customers with multiple regional tenants, or "folder accounts" do not support Custom Roles.

Custom Roles have two main characteristics - Permissions and Scope.

Permissions specify User and User Group access to specific features and their functions, including the following main categories:

Health Monitoring
Asset Management & Monitoring
Integration Management
Access Control Management
Logs Monitoring
Dashboards and Reports Management
Account Management
Incident and Threat Management
Automation Management

Scope specifies the data that a User or User Group has access to when given the Custom Role. Scope essentially defines access control for the Custom Role by "attribute". You can configure the following Scope categories:

IDENTITY
CLASSIFICATION
DEPLOYMENT
MEDICAL
NETWORK
DATASOURCE (this is the only scope category applicable to users)