Skip to main content
Question

Google SecOps Ingestion matrix permissions issue

  • November 14, 2025
  • 1 reply
  • 33 views

kecheng
Forum|alt.badge.img

 

I already setting data access scope to the user account and the user account only can find own data 

 

Now I create native dashboard to this limit user account

 

I found problem 

 

I use two query function UDM seach and ingest search

 

The UDM search can find data but ingest search can’t

 

I asign two role  for this account

Chronicle API Restricted Data Access (Beta)
Chronicle API Restricted Data Access Viewer (Beta)

UDm search

ingestion search 

 

If i want ingestion search work and i need to give the account with global data access permission

 

But give  global data access permission I can find any data

 

so how can i do?

1 reply

gauravso
Staff
Forum|alt.badge.img+2
  • Staff
  • November 19, 2025

Hello,

 

This is a known limitation with Data RBAC. The data set for ingestion metrics is only available to global user.

 

Please refer to the below documentation:

https://cloud.google.com/chronicle/docs/reports/native-dashboards#ingestion_metrics