Software Bill of Materials › Unified Security Exposure Management › Security Operations
Components installed with Software Bill of Materials applications
Several types of components are installed with activation of the Software Bill of Materials applications, including tables, user roles, and scheduled jobs.
Roles installed
| Role title \[name\] | Description | Contains roles |
|---|
| sn\_sbom\_response.managelicense | This role is installed with the SBOM Response application. This role permits you to resolve licenses to components. | None |
| sn\_sbom\_response.licenseresolver | This role is installed with the SBOM Response application. This role permits you to view uploaded license information and determines which licenses are permitted and which are banned. | None |
| SBOM write \[sn\_sbom\_dm.app\_write\], SBOM create \[sn\_sbom\_dm.app\_create\], SBOM read \[sbom\_dm.app\_read\] | These roles are installed with the Data Model for SBOM application. They permit you to read, create, and edit records in SBOM tables. | None |
| SBOM Cores ingests \[sn\_sbom\_core.sbom\_ingest\] and SBOM Core admin \[ sn\_sbom\_core.admin\] | These roles are installed with the SBOM Core application. The sn\_sbom\_core.sbom\_ingest role permits you to upload SBOMs manually and via the REST API. The sn\_sbom\_core.admin role permits you to create, read, edit data, and upload SBOMs. This role also gives you access to the SBOM Core modules in your instance. It inherits the roles from the Data Model for SBOM application. | - sn\_sbom\_dm.app\_write - sn\_sbom\_dm.app\_create - sn\_ sbom\_dm.app\_read |
| SBOM Analyst \[sn\_sbom\_resp.sbom\_analyst\] | This role is installed with the SBOM Response application. It inherits the sn\_sbom\_core.admin role and enables you to access the SBOM Workspace. | - sn\_sbom\_core.admin - sn\_sbom\_dm.app\_write - sn\_sbom\_dm.app\_create - sn\_ sbom\_dm.app\_read - sn\_sbom\_resp.manage\_avi\_rule - sn\_sbom\_config\_rule table |
Tables installed with the SBOM applications
The tables listed in the following table are installed with the Data model for SBOM application.
| Table | Description |
|---|
| SBOM document \[sn\_sbom\_doc\] | Contains the BOM entities you've uploaded. |
| SBOM component \[sn\_sbom\_component\] | Contains imported SBOM components, classifiers, and versions that are included in the parent component. |
| SBOM component relationship \[sn\_sbom\_comp\_relationship\] | Contains components and their dependencies. |
| SBOM m2m bom component \[sn\_sbom\_m2m\_bom\_comp\] | Contains the BOM component mappings. |
| SBOM license \[sn\_sbom\_license\] | Contains the open-source license IDs used for components. |
| SBOM supplier \[sn\_sbom\_supplier\] | Contains the organization that supplied the component, which might be a manufacturer, distributor, or repackager. |
| SBOM component ID \[sn\_sbom\_comp\_id\] | Contains the component identifiers. |
| SBOM component properties \[sn\_sbom\_comp\_property\] | Contains the component name-value properties. |
| SBOM hash \[sn\_sbom\_hash\] | Contains component hashing algorithms. |
| SBOM contact \[sn\_sbom\_contact\] | Contains contact information for the supplier. |
| SBOM external references \[sn\_sbom\_comp\_external\_ref\] | Contains components, component types, and external URLs that document systems, sites, and information that might be relevant but are not included with the SBOM. |
| SBOM package group \[sn\_sbom\_pkg\_group\] | Contains the package group information for every component. Multiple version of libraries may be used across applications. Versions of the same components are grouped and added to this table to avoid pulling the same data multiple times. |
The tables listred in the following table are installed with the SBOM Response application
| Table | Description |
|---|
| SBOM creation rule configuration \[sn\_sbom\_config\_rule\] | Contains AVIT creation rules used in the SBOM Workspace. |
| SBOM m2m component vulnerabilities \[sn\_sbom\_m2m\_comp\_vuln\] | Contains the components and associated vulnerabilities. |
| Component vulnerability fix information\[sn\_sbom\_comp\_vuln\_fix\_info\] | Contains the fix versions for each third-party vulnerability associated to a version of the component. |
| Component report insights\[sn\_sbom\_comp\_report\_insight\] | Contains insights about stale, abandoned, and fixability data for components. |
| Deps Integration Imports\[sn\_sbom\_deps\_integration\_import\] | Contains imported version list information for a given package or library. |
| OSV Integration Imports\[sn\_sbom\_osv\_integration\_import\] | Contains vulnerability intelligence information for a given version of a package or library. |
| Component Version Lists\[sn\_sbom\_st\_version\_list\] | Contains version information and published dates for components. |
Scheduled jobs
| Job | Description |
|---|
| Calculate Component Fixability and Vulnerability | Calculates information about how to fix components with vulnerabilities and how likely it is that you can fix components. |
| OSV Integration New Components | Retrieves all publicly known vulnerabilities associated with packages (libraries) that were imported after the last integration run. |
| OSV Integration Comprehensive | Retrieves all publicly known vulnerabilities associated with all packages that have been imported. |
| Deps.dev Integration | Retrieves all publicly known versions for packages and used with to identify components in Stale and Abandoned states. |
| Update vuln_based_criticality on bom components | Updates criticality for components with vulnerabilities. |