Configuration Compliance Test Groups/Policies Active Field

[Lacey L]

How do you deactivate a test group or policy in Configuration Compliance? Is there a certain role needed to do so? I have tried elevating to security admin or impersonating the Qualys admin role and neither works.

[danielgarner]

I am seeing the same issue. I have elevated permissions to "admin". Also, dropped the "sn_vulc.admin" role to my account. There is still no capability to switch Active Test Groups to False. What role is missing? Or, is there something that needs to be changed with the "sn_vulc.admin" ACLs to unblock this Security control?

[Joe Morsbach · Accepted solution]

The out of box ACLS for create and write on this table has the role "nobody" which means it was never intended for a user to do anything to this table.  It's intended for an integration to write/update to the table.  Your only choice here is to modify those ACLs accordingly