User Admin permissions revoked in VMware Carbon Black EDR console

Issue

A Red Canary user no longer has Admin access in the VMware Carbon Black EDR (Response) console. Alternatively, the user was set as Admin in the CB EDR console, but that access was later revoked.

Resolution

Red Canary reconciles permissions for VMware Carbon Black EDR users based on their permissions in Red Canary.

The user needs the Responder role in Red Canary to be granted the Admin role in Carbon Black EDR.

If the user account hasn’t been created yet, the user just needs to login to the Carbon Black console via Red Canary for the account to be created with the correct permissions.

See Understand and assign roles for more information.