Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

MISP user roles and permissions

Review the user roles that are required in the MISP integration for Security Operations integration.

MISP capabilityTaggerTag editor
Observable Enrichment (Read-only)
Sighting Search (Read-only)
MISP capabilitySighting creator
Report Sighting
MISP capabilityTaggerTag editor
Edit Event/Attribute Tags
Edit Event/Attribute Galaxies
Edit Attribute Comments
Add New Attribute to event
Create Event in MISP

Parent Topic:Getting started with MISP integration for Security Operations