diff --git a/salt/soc/defaults.yaml b/salt/soc/defaults.yaml index 0102dbd5e..ef0d59073 100644 --- a/salt/soc/defaults.yaml +++ b/salt/soc/defaults.yaml @@ -1518,6 +1518,7 @@ soc: anonymousCidr: apiKey: staticrbac: + defaultRole: "" roleFiles: - rbac/permissions - rbac/roles diff --git a/salt/soc/soc_soc.yaml b/salt/soc/soc_soc.yaml index 2086492ad..c735c0b6a 100644 --- a/salt/soc/soc_soc.yaml +++ b/salt/soc/soc_soc.yaml @@ -455,6 +455,11 @@ soc: global: True advanced: True forcedType: int + staticrbac: + defaultRole: + description: "Default role for new users that have not been assigned a role. When a role is specified, an attempt will be made to permanently assign the role to the user once the user accesses SOC. The role name must match exactly the name of an existing RBAC role. Standard system roles include: limited-auditor, limited-analyst, auditor, analyst, superuser" + global: True + advanced: False strelkaengine: aiRepoUrl: description: URL to the AI repository. This is used to pull in AI models for use in Strelka rules.