Skip to content

Commit

Permalink
Update Data connector permissions (#13)
Browse files Browse the repository at this point in the history
  • Loading branch information
@jaspreet-saini
jaspreet-saini authored Jan 29, 2025
1 parent 12d3a3c commit 1bc1167
Show file tree
Hide file tree
Showing 3 changed files with 78 additions and 51 deletions.
11 changes: 10 additions & 1 deletion Solutions/Samsung Knox Asset Intelligence/Data Connectors/SamsungDCDefinition.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -58,14 +58,23 @@
"resourceProvider": [
{
"provider": "Microsoft.OperationalInsights/workspaces",
"permissionsDisplayText": "Read and Write permissions on the Log Analytics workspace are required to enable the Solution. You can either choose an existing Log Analytics workspace or create new. See the [documentation](https://learn.microsoft.com/en-us/azure/azure-monitor/logs/quick-create-workspace?tabs=azure-portal) to learn more about Log Analytics workspace creation.",
"permissionsDisplayText": "read and write permissions on the workspace are required.",
"providerDisplayName": "Workspace",
"scope": "Workspace",
"requiredPermissions": {
"write": true,
"read": true,
"delete": true
}
},
{
"provider": "Microsoft.OperationalInsights/workspaces/sharedKeys",
"permissionsDisplayText": "read permissions to shared keys for the workspace are required. [See the documentation to learn more about workspace keys](https://docs.microsoft.com/azure/azure-monitor/platform/agent-windows#obtain-workspace-id-and-key).",
"providerDisplayName": "Keys",
"scope": "Workspace",
"requiredPermissions": {
"action": true
}
}
],
"customs": [
Expand Down
Binary file modified Solutions/Samsung Knox Asset Intelligence/Package/3.0.1.zip
View file
Binary file not shown.
118 changes: 68 additions & 50 deletions Solutions/Samsung Knox Asset Intelligence/Package/mainTemplate.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -202,14 +202,23 @@
"resourceProvider": [
{
"provider": "Microsoft.OperationalInsights/workspaces",
"permissionsDisplayText": "Read and Write permissions on the Log Analytics workspace are required to enable the Solution. You can either choose an existing Log Analytics workspace or create new. See the [documentation](https://learn.microsoft.com/en-us/azure/azure-monitor/logs/quick-create-workspace?tabs=azure-portal) to learn more about Log Analytics workspace creation.",
"permissionsDisplayText": "read and write permissions on the workspace are required.",
"providerDisplayName": "Workspace",
"scope": "Workspace",
"requiredPermissions": {
"write": true,
"read": true,
"delete": true
}
},
{
"provider": "Microsoft.OperationalInsights/workspaces/sharedKeys",
"permissionsDisplayText": "read permissions to shared keys for the workspace are required. [See the documentation to learn more about workspace keys](https://docs.microsoft.com/azure/azure-monitor/platform/agent-windows#obtain-workspace-id-and-key).",
"providerDisplayName": "Keys",
"scope": "Workspace",
"requiredPermissions": {
"action": true
}
}
],
"customs": [
Expand Down Expand Up @@ -410,14 +419,23 @@
"resourceProvider": [
{
"provider": "Microsoft.OperationalInsights/workspaces",
"permissionsDisplayText": "Read and Write permissions on the Log Analytics workspace are required to enable the Solution. You can either choose an existing Log Analytics workspace or create new. See the [documentation](https://learn.microsoft.com/en-us/azure/azure-monitor/logs/quick-create-workspace?tabs=azure-portal) to learn more about Log Analytics workspace creation.",
"permissionsDisplayText": "read and write permissions on the workspace are required.",
"providerDisplayName": "Workspace",
"scope": "Workspace",
"requiredPermissions": {
"write": true,
"read": true,
"delete": true
}
},
{
"provider": "Microsoft.OperationalInsights/workspaces/sharedKeys",
"permissionsDisplayText": "read permissions to shared keys for the workspace are required. [See the documentation to learn more about workspace keys](https://docs.microsoft.com/azure/azure-monitor/platform/agent-windows#obtain-workspace-id-and-key).",
"providerDisplayName": "Keys",
"scope": "Workspace",
"requiredPermissions": {
"action": true
}
}
],
"customs": [
Expand Down Expand Up @@ -606,10 +624,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "SamsungDCDefinition",
"dataTypes": [
"Samsung_Knox_Process_CL"
]
],
"connectorId": "SamsungDCDefinition"
}
],
"tactics": [
Expand All @@ -622,13 +640,13 @@
"aggregationKind": "SingleAlert"
},
"incidentConfiguration": {
"createIncident": true,
"groupingConfiguration": {
"reopenClosedIncident": false,
"lookbackDuration": "5H",
"matchingMethod": "AllEntities",
"enabled": false,
"matchingMethod": "AllEntities"
},
"createIncident": true
"lookbackDuration": "5H"
}
}
}
},
Expand Down Expand Up @@ -707,10 +725,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "SamsungDCDefinition",
"dataTypes": [
"Samsung_Knox_Audit_CL"
]
],
"connectorId": "SamsungDCDefinition"
}
],
"tactics": [
Expand All @@ -723,13 +741,13 @@
"aggregationKind": "SingleAlert"
},
"incidentConfiguration": {
"createIncident": true,
"groupingConfiguration": {
"reopenClosedIncident": false,
"lookbackDuration": "5H",
"matchingMethod": "AllEntities",
"enabled": false,
"matchingMethod": "AllEntities"
},
"createIncident": true
"lookbackDuration": "5H"
}
}
}
},
Expand Down Expand Up @@ -808,10 +826,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "SamsungDCDefinition",
"dataTypes": [
"Samsung_Knox_System_CL"
]
],
"connectorId": "SamsungDCDefinition"
}
],
"tactics": [
Expand All @@ -824,13 +842,13 @@
"aggregationKind": "SingleAlert"
},
"incidentConfiguration": {
"createIncident": true,
"groupingConfiguration": {
"reopenClosedIncident": false,
"lookbackDuration": "5H",
"matchingMethod": "AllEntities",
"enabled": false,
"matchingMethod": "AllEntities"
},
"createIncident": true
"lookbackDuration": "5H"
}
}
}
},
Expand Down Expand Up @@ -909,10 +927,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "SamsungDCDefinition",
"dataTypes": [
"Samsung_Knox_User_CL"
]
],
"connectorId": "SamsungDCDefinition"
}
],
"tactics": [
Expand All @@ -925,13 +943,13 @@
"aggregationKind": "SingleAlert"
},
"incidentConfiguration": {
"createIncident": true,
"groupingConfiguration": {
"reopenClosedIncident": false,
"lookbackDuration": "5H",
"matchingMethod": "AllEntities",
"enabled": false,
"matchingMethod": "AllEntities"
},
"createIncident": true
"lookbackDuration": "5H"
}
}
}
},
Expand Down Expand Up @@ -1010,23 +1028,23 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "SamsungDCDefinition",
"dataTypes": [
"Samsung_Knox_System_CL"
]
],
"connectorId": "SamsungDCDefinition"
}
],
"eventGroupingSettings": {
"aggregationKind": "SingleAlert"
},
"incidentConfiguration": {
"createIncident": true,
"groupingConfiguration": {
"reopenClosedIncident": false,
"lookbackDuration": "5H",
"matchingMethod": "AllEntities",
"enabled": false,
"matchingMethod": "AllEntities"
},
"createIncident": true
"lookbackDuration": "5H"
}
}
}
},
Expand Down Expand Up @@ -1105,10 +1123,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "SamsungDCDefinition",
"dataTypes": [
"Samsung_Knox_System_CL"
]
],
"connectorId": "SamsungDCDefinition"
}
],
"eventGroupingSettings": {
Expand All @@ -1118,13 +1136,13 @@
"alertDynamicProperties": []
},
"incidentConfiguration": {
"createIncident": true,
"groupingConfiguration": {
"reopenClosedIncident": false,
"lookbackDuration": "5H",
"matchingMethod": "AllEntities",
"enabled": false,
"matchingMethod": "AllEntities"
},
"createIncident": true
"lookbackDuration": "5H"
}
}
}
},
Expand Down Expand Up @@ -1203,10 +1221,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "SamsungDCDefinition",
"dataTypes": [
"Samsung_Knox_User_CL"
]
],
"connectorId": "SamsungDCDefinition"
}
],
"tactics": [
Expand All @@ -1219,13 +1237,13 @@
"aggregationKind": "SingleAlert"
},
"incidentConfiguration": {
"createIncident": true,
"groupingConfiguration": {
"reopenClosedIncident": false,
"lookbackDuration": "5H",
"matchingMethod": "AllEntities",
"enabled": false,
"matchingMethod": "AllEntities"
},
"createIncident": true
"lookbackDuration": "5H"
}
}
}
},
Expand Down Expand Up @@ -1304,23 +1322,23 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "SamsungDCDefinition",
"dataTypes": [
"Samsung_Knox_Audit_CL"
]
],
"connectorId": "SamsungDCDefinition"
}
],
"eventGroupingSettings": {
"aggregationKind": "SingleAlert"
},
"incidentConfiguration": {
"createIncident": true,
"groupingConfiguration": {
"reopenClosedIncident": false,
"lookbackDuration": "5H",
"matchingMethod": "AllEntities",
"enabled": false,
"matchingMethod": "AllEntities"
},
"createIncident": true
"lookbackDuration": "5H"
}
}
}
},
Expand Down

0 comments on commit 1bc1167

Please sign in to comment.