CrowdStrike Falcon Additional Permissions

The following permissions are required to support advanced configuration and enforcement actions in the CrowdStrike Falcon adapter. Ensure these permissions are granted to the user account used for these operations.

Advanced Configuration

The following permissions are required for various Advanced Configurations:

CategoryScopePermission
UsersUser ManagementRead
Vulnerabilitiesvulnerabilities:readRead
Configuration AssessmentsFalcon Configuration Assessment:readRead

Enforcement Actions

The following permissions are required to run CrowdStrike Falcon Enforcement Actions:

ScopePermission
HostsWrite