Roles Configuration

Roles are a flexible permission setup. Create a role, add users, and then share captures with that role.

You can then go to the PCAP Browser and grant access to certain roles from the details panel or mass actions.

Roles are not billing plans. They control capture access only.

Roles also do not let members mint signed anonymous viewer links for someone else's private capture. Those links are owner-managed and currently require full Agent entitlement in SaaS, which also covers grandfathered paid full-access plans, while on-prem deployments bypass the SaaS paywall.

Roles do not override the capture-level noAI policy either. A role member can still open the capture when the ACL allows it, but AI-assisted analysis and AI-derived packet insights stay disabled for that capture.

For current SaaS vs on-prem plan access, admin boundaries, quotas, downloads, upload ceilings, and concurrent-session rules, see User Types and Entitlements.

More on the next page.