https://community.splunk.com/t5/Splunk-SOAR/Crowdstrike-App-in-SOAR-Permissions/m-p/570186#M710 <P>Hi,</P><P>This will be dependent on what you want to achieve via automation with the Crowdstrike App.</P><P>For example, if you want to update detections, then the API Client you permission should have Read and Write to Detections.</P><P>We usually select the options we believe are necessary and then if additional permissions are required, we add them.</P> Fri, 08 Oct 2021 09:26:44 GMT WalshyB 2021-10-08T09:26:44Z https://community.splunk.com/t5/Splunk-SOAR/Crowdstrike-App-in-SOAR-Permissions/m-p/570005#M709 <P>Hey there,</P><P data-unlink="true">I am looking to Configure the Crowdstrike OAuth API app inside my SOAR instance. To connect to Crowdstrike it will require an account on the Crowdstrike Falcon instance.<BR /><BR />I cannot find anywhere in the Documentation which states what permissions are needed for this account.<BR />Crowdstrike details the permissions <A href="https://www.crowdstrike.com/blog/tech-center/get-access-falcon-apis/" target="_self">on it's website</A> but nothing specific for the API actions which are part of the SOAR app.</P><P data-unlink="true">Any ideas? <span class="lia-unicode-emoji" title=":confused_face:">😕</span></P><P>&nbsp;</P> Thu, 07 Oct 2021 08:20:14 GMT https://community.splunk.com/t5/Splunk-SOAR/Crowdstrike-App-in-SOAR-Permissions/m-p/570005#M709 EdgeSync 2021-10-07T08:20:14Z https://community.splunk.com/t5/Splunk-SOAR/Crowdstrike-App-in-SOAR-Permissions/m-p/570186#M710 <P>Hi,</P><P>This will be dependent on what you want to achieve via automation with the Crowdstrike App.</P><P>For example, if you want to update detections, then the API Client you permission should have Read and Write to Detections.</P><P>We usually select the options we believe are necessary and then if additional permissions are required, we add them.</P> Fri, 08 Oct 2021 09:26:44 GMT https://community.splunk.com/t5/Splunk-SOAR/Crowdstrike-App-in-SOAR-Permissions/m-p/570186#M710 WalshyB 2021-10-08T09:26:44Z