Splunk IT Service Intelligence Certified Admin — Question 19

Which of the following is a reason to create a new role in SOAR?

Answer options

• A. To define a set of users who have access to a special label.
• B. To define a set of users who have access to a restricted app.
• C. To define a set of users who have access to a sensitive tag.
• D. To define a set of users who have access to an event's reports.

Correct answer: A

Explanation

The correct answer is A because creating a new role is typically aimed at managing access to specific resources, such as a special label. Options B, C, and D focus on different types of access that may not directly relate to the creation of a new role in SOAR.