topic What is the minimum privilege for send sam rule from API? in API / CLI Discussion https://community.checkpoint.com/t5/API-CLI-Discussion/What-is-the-minimum-privilege-for-send-sam-rule-from-API/m-p/13175#M926 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>What is the minimum privilege for send sam rule from API? We don't want to do this with admin account. Is this possible?</P><P></P><P>Any advice about this issue would be appreciated.</P><P></P><P>Thanks,</P><P>Yasemen</P></BODY></HTML> Wed, 25 Jul 2018 13:53:03 GMT yasemen_karakoc 2018-07-25T13:53:03Z What is the minimum privilege for send sam rule from API? https://community.checkpoint.com/t5/API-CLI-Discussion/What-is-the-minimum-privilege-for-send-sam-rule-from-API/m-p/13175#M926 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>What is the minimum privilege for send sam rule from API? We don't want to do this with admin account. Is this possible?</P><P></P><P>Any advice about this issue would be appreciated.</P><P></P><P>Thanks,</P><P>Yasemen</P></BODY></HTML> Wed, 25 Jul 2018 13:53:03 GMT https://community.checkpoint.com/t5/API-CLI-Discussion/What-is-the-minimum-privilege-for-send-sam-rule-from-API/m-p/13175#M926 yasemen_karakoc 2018-07-25T13:53:03Z Re: What is the minimum privilege for send sam rule from API? https://community.checkpoint.com/t5/API-CLI-Discussion/What-is-the-minimum-privilege-for-send-sam-rule-from-API/m-p/13176#M927 <HTML><HEAD></HEAD><BODY><P>As far as I know, the only way to set a SAM rule is to run a script on the gateway that executes fw sam (or similar).</P><P>In which case, I assume the permission that's required is for run-script, which I believe is the following:</P><P></P><P><IMG class="image-1 jive-image" src="https://community.checkpoint.com/legacyfs/online/checkpoint/67259_pastedImage_1.png" /></P></BODY></HTML> Wed, 25 Jul 2018 16:43:33 GMT https://community.checkpoint.com/t5/API-CLI-Discussion/What-is-the-minimum-privilege-for-send-sam-rule-from-API/m-p/13176#M927 PhoneBoy 2018-07-25T16:43:33Z Re: What is the minimum privilege for send sam rule from API? https://community.checkpoint.com/t5/API-CLI-Discussion/What-is-the-minimum-privilege-for-send-sam-rule-from-API/m-p/13177#M928 <HTML><HEAD></HEAD><BODY><P>GAIA users with "adminRole" can add SAM rules with CLISH.</P><P>Other options are:</P><P>- Automatic Reactions with SmartEvent - and then no one needs to manually do the SAM thing</P><P>- <A _jive_internal="true" href="https://community.checkpoint.com/message/22776-automate-deployment-of-indicators-of-compromise-ioc-with-a-new-api">IOC API</A></P></BODY></HTML> Thu, 02 Aug 2018 18:58:36 GMT https://community.checkpoint.com/t5/API-CLI-Discussion/What-is-the-minimum-privilege-for-send-sam-rule-from-API/m-p/13177#M928 Tomer_Sole 2018-08-02T18:58:36Z