Adding and removing "Account Admin" role in Cortex Gateway / XSOAR 8

• Cortex XSOAR
• Version 8.x
• Cortex Gateway
• Roles management

A super user role that is assigned directly to the user in the Cortex Gateway or tenant and has full access to all Cortex products in your account, including all tenants added in the future.

How to add the "Account Admin" role to an XSOAR 8 user.

1. Go to Settings & Info > Settings, and under Access Management click Users.
2. Search for the user you want to add the "Account Admin" role to and right-click on it, selecting "Edit User Permissions"
    
3. Then in "Role" search "Account Admin" and click on it.
    
4. Click "Save".

How to add the "Account Admin" role to a Cortex Gateway user.

1. In the Cortex Gateway Accounts view, click on "Permission Management".
    
2. Search for the user you want to add the "Account Admin" role to and right-click on it, selecting "Update Permissions.
     
3. Then, select check the box next to 'Apply "Account Admin" role.' NOTE: This user will have access to all tenants and products with full permissions.
    
4. Click "Save"

How to remove the "Account Admin" role to a Cortex Gateway user.

1. Repeat steps 1 and 2 from the previous section. Search for the desired user and click "Update Permissions".
2. Uncheck the box next to 'Apply "Account Admin" role.'.
3. The user will not have any role in any product and tenant, so you will have to select the Product and Tenants in which to give the user a role, for example, "Instance Administrator".

In the documentation, the "Account Admin" role is described like this:

A super user role that is assigned directly to the user in the Cortex Gateway or tenant and has full access to all Cortex products in your account, including all tenants added in the future. In the Cortex Gateway, the Account Admin can assign roles for Cortex instances, and can also activate Cortex tenants specific to the product. This user has the same view/edit permissions in the tenant as the Instance Administrator.

And the particular ways to add it and remove it are specified like this:

• The user who activated the Cortex product is assigned the Account Admin role.
• You can add the role to a user in the Cortex Gateway or the tenant. If you need to remove the Account Admin role from a user, this can only be done in the Cortex Gateway.
• Only users with the Account Admin role can add or remove another Account Admin user role.