User Roles and Responsibilities
TeskaLabs LogMan.io Plus Administrator¶
ID: {tenant_name}/~lmio-plus-admin
Example: teskalabs/~lmio-plus-admin
Description:
The LogMan.io Plus Administrator oversees and manages configurations of LogMan.io Plus services and user accounts within a single tenant. This role is available exclusively for clients with a Plus-tier license, granting access to advanced features.
Responsibilities: - Manages service configurations. - Oversees user accounts and role assignments. - Configures and manages alerts and reports. - Manages data export, dashboards, and replays. - Administers collectors, event lanes, and log parsers. - Grants and manages access to various monitoring and analysis tools. - Manages alert maintenance and advanced analysis. - Has full access to parser configurations and modifications.
Intended for:
Senior administrators of Plus-tier clients responsible for full system management, configuration, and role assignments within LogMan.io Plus.
TeskaLabs LogMan.io Administrator¶
ID: {tenant_name}/~lmio-admin
Example: teskalabs/~lmio-admin
Description:
The LogMan.io Administrator oversees and manages configurations of LogMan.io services and user accounts within a single tenant. Unlike the Plus Administrator, this role does not include advanced alert management, parser configuration, or deep analysis tools.
Responsibilities: - Manages service configurations and maintenance. - Oversees user accounts and role assignments. - Configures and manages dashboards, reports, and alerts. - Manages data exports and system analysis. - Administers event lanes, replays, and collectors. - Has limited access to alert configuration (without full maintenance rights). - Does not have access to advanced analysis and parser modifications.
Intended for:
Administrators responsible for managing LogMan.io services and user roles, primarily in standard-tier deployments.
TeskaLabs LogMan.io Analyst¶
ID: {tenant_name}/~lmio-analyst
Example: teskalabs/~lmio-analyst
Description:
The Analyst monitors and safeguards online systems and networks, identifies security threats, and has access to all TeskaLabs LogMan.io tools and features.
Responsibilities: - Monitors security alerts and incidents. - Analyzes log data and reports. - Accesses dashboards and data visualization tools. - Configures and manages alerts, reports, and exports. - Manages baseline data and lookup tables. - Works with log parsers and data collectors.
Intended for:
Security analysts and threat hunters responsible for identifying and mitigating security risks.
TeskaLabs LogMan.io Operator¶
ID: {tenant_name}/~lmio-operator
Example: teskalabs/~lmio-operator
Description:
The Operator performs essential monitoring and basic analysis tasks in TeskaLabs LogMan.io. This role involves independently reviewing alerts, monitoring data flows, and conducting initial investigations into logs and visualizations. Operators have access to core analytical tools but do not handle advanced analysis or configuration management.
Responsibilities: - Monitors dashboards and reports. - Conducts basic investigations of logs and visualizations - Accesses and manages lookup tables. - Works with log parsers and replay tools. - Handles alerts and event analysis. - Supports system maintenance and operations.
Intended for:
Operators and IT personnel responsible for day-to-day monitoring and troubleshooting.
TeskaLabs LogMan.io Reader¶
ID: {tenant_name}/~lmio-reader
Example: teskalabs/~lmio-reader
Description:
The Reader role provides users with read-only access to logs, visualizations, and related data within TeskaLabs LogMan.io. This includes exploring events in the Discover screen, viewing dashboards, reports, exports and alerts.
Responsibilities: - Views and explores data in the Discover screen. - Views dashboards and reports. - Monitors Alert Management. - Accesses data exports in a read-only capacity.
Intended for:
Users who require visibility into system data but do not need administrative or operational access.