Tags Permissions

The Tags Permissions allows you to enable or disable a users ability to view results data and the ability to export that data by assigning permissions for tags and the individual endpoints within a tag.

The tags Permissions section contains the following columns:

Field	Description
Name	Displays the name of the tag and each endpoint within the tag. Clicking the arrow to the left of a tag name shows the endpoints and any nested tags contained within that tag.
View	Displays the rights that are granted to the role to view results for the corresponding tag or endpoint. The following rights are available. Inherited - When set for an endpoint or a nested tag, the same rights that are granted to the top tag are granted to the endpoint or nested tag. This selection is not available for top level tags. None - Users within the role are not able to view the results for the corresponding tag or the endpoint. Masked - Users within the role are able to view the results, but the actual identity match is masked. Full - Users within the role are able to view the results without any masking of the identity.
Export	Displays the rights that are granted to the role to export results data for the corresponding tag or endpoint. Inherited - When set for an endpoint or a nested tag, the same rights that are granted to the top tag are granted to the endpoint or nested tag. This selection is not available for top level tags. None - Users within the role are not able to export the results for the corresponding tag or endpoint. The export button is disabled. Masked - Users within the role are able to export the results, but the actual identity match is masked in the output. Full - Users within the role are able to export the results without any masking of the identity in the output.
Edit	Displays the edit permissions that have been granted to the role for creating and maintaining tags for the selected tag and for the endpoints within that tag. To modify these permissions click in the Edit column of the tag that you wish to modify and then click on the drop-down box. Select the permissions that you wish to enable by single left clicking the mouse on the permission. The selected permission is highlighted in blue when enabled. Click the Green checkmark to save your selections. To remove a permission click the permission again to deselect it and click the green checkmark.. The view permission must be enabled in order to change these permissions. If you remove the view permission the Edit permissions are also removed. The following edit permissions are available. Modify - Allows users to rename and change the tag type (via the Edit Tag option), remove a tag, change the tag edit permissions (Modify, Add/Remove Tags and Add/Remove Endpoints) and change endpoint permissions (View and Export) within the tag . To create a tag, a role is still required to have the appropriate create tag permission, which is granted in the Tags Editing section of General Permissions. This permission is available for all tag types. Add/Remove Tags - Allows users within the role to create or remove a tag nested within a simple tag. The View permission must be enabled in order to change this permission. If you remove the view permission this permission is also removed. This permission is only available for Simple tags. Dynamic tags (Filter, IP Range and Active Directory / LDAP tags) do not have this permission. Add/Remove Endpoints - Allows users within the role to drag and drop an endpoint into a tag nested within a simple tag. This permission is only available for Simple tags. Dynamic tags (Filter, IP Range and Active Directory / LDAP tags) do not have this permission. The Edit column displays different values depending on which edit permissions have been granted. If no edit permissions have been granted, the Edit column displays "None." If only the Modify permission has been granted, the Edit column displays "Modify". If the Add/Remove Tags or the Add/Remove Endpoints permission has been granted along with the Modify permission, the edit column displays an abbreviation for each permission: "M" for Modify, "T" for Add/Remove Tags, "E" for Add/Remove Endpoints. If the Add/Remove Tags or the Add/Remove Endpoints permissions have been granted, the edit column displays an abbreviation for each permission: "T" for Add/Remove Tags, "E" for Add/Remove Endpoints. If all edit permissions have been granted the Edit column displays "Full." Hovering the cursor over the Edit column displays a tooltip showing the full names of the permissions that have been granted for the selected tag.

Notes:

The owner of a tag still retains all of the edit permissions to a tag he created, regardless of the settings of the permissions described above.
Tags permissions cannot be modified for the Administrator role.
Assigning view permissions to the All Endpoints tag negates the view permissions on any other tags. For example, if a role has view permissions on the All Endpoints tag, users within that role are able to see all tags when viewing a report and on the Endpoint List regardless of the view permissions on any other tags.
Beginning with version 10.5, only a user who has permissions to All Endpoints can set permissions on Filter and IP Range tags. Filter and IP Range tags do not inherit permissions from parent tags. Only when explicit permissions are set on those, are they respected.