Role Capabilities
You can assign any of the following capabilities when you create roles.
Data Management
| Capability | Description |
|---|---|
| Manage connections | Manage the connections that allow you to send alerts to other tools. |
| Manage Collectors | Install and manage installed and hosted Collectors and Sources. Manage permission automatically includes view permission. |
| Manage Ingest Budgets | Manage ingest budgets. Enabling this will automatically enable the Manage Collectors capability. The Manage Collectors capability on its own permits the re-assignment of budgets to different Collectors, but not creating or deleting them. |
| Manage data volume feed | Enable and manage the data volume index for your account to avoid using On-Demand Capacity, and to determine when you need to upgrade your account. |
| View Collectors | View and Collectors and Sources that have already been installed or added. |
| View fields | View fields, which are custom metadata fields ou can assign to logs. |
| Manage fields | Manage fields, which are custom metadata fields ou can assign to logs. Note that if you grant a role the Manage Fields capability, users with that role will also have the View Fields and View field extraction rules capabilities. |
| View field extraction rules | View field extraction rules, which speed the search process by automatically parsing fields as log messages are ingested. |
| Manage field extraction rules | Manage field extractions, which speed the search process by automatically parsing fields as log messages are ingested. Note that if you grant a role the Manage field extraction rules capability, users with that role will also have the Manage Fields, View Fields, and View field extraction rules capabilities. |
| View Partitions | View Partitions. |
| Manage Partitions | View, create, edit, and delete Partitions. Note that if you grant a role the Manage Partitions capability, users with that role will also have View Partitions and Manage S3 data forwarding capabilities. |
| View Scheduled Views | View Scheduled Views. |
| Manage Scheduled Views | View, create, edit, and delete Scheduled Views. Note that if you grant a role the Manage Schedule View capability, users with that role will also have View Scheduled View capabilities. |
| Manage S3 data forwarding | Manage S3 data forwarding from Sumo Logic to an S3 bucket. |
| Manage Content | Manage the content for your organization. This provides access to Admin Mode in the Library. |
| Manage Tokens | Manage Installation Tokens. |
| View Account Overview | View the Account Overview page. |
Metrics
| Capability | Description |
|---|---|
| Manage monitors | Edit, mute, or delete metrics monitors. This capability isn't required to view metrics monitors. |
| Manage Logs-to-Metrics | Create, edit, or delete Logs-to-Metrics rules. |
| Manage Metrics Transformation Rules | Create, edit, or delete Metrics Transformation rules. |
| Manage Metric Rules | Create, edit, or delete Metric Rules. |
Security
| Capability | Description |
|---|---|
| Manage password policy | Set the password policy for your Sumo Logic account. |
| Whitelist IP addresses | Explicitly grant access to specific IP addresses or address ranges. |
| Manage access keys | Set up, activate, deactivate, or delete access keys for your organization. |
| Manage support account access | Enable management of the Sumo Logic support account for your organization. |
| Manage audit data feed. | Enable and manage the Audit Index, which provides information on the internal events that occur in your account associated with account management, user activity, and scheduled searches. |
| Manage SAML | Provision and manage SAML for single sign-on to your Sumo Logic accounts. |
| Manage Share dashboards outside of the organization | Share a dashboard with users who don't have access to Sumo Logic. |
| Manage organization settings | Users with this capability can configure a concurrent user sessions limit and enable the Data Access Level for Shared Dashboards security policy. |
| Change Data Access Level of Dashboards | Users with this capability can change the data access level of dashboards or scheduled searches to which they have edit or manage permission. |
Dashboards
| Capability | Description |
|---|---|
| Share dashboards with the whitelist | Share dashboards in view-only mode with no login required. Viewers must be connecting from IP addresses specified in your service whitelist. |
| Share dashboards with the world | Share dashboards in view-only mode with no login required. Anyone with the URL can view the dashboard without logging in. |