IBM Security Join our 16,000+ members as we work together to overcome the toughest challenges of cybersecurity. Join the Community
I have been looking for information on if and how our company could automate user creation and role assignment for new users in Qradar. We currently have a large number of platforms and on-boarding is a manual process. I've looked to see if there is a CLI or API method to do this, but I haven't found anything yet so I wanted to reach out to the community for any insight.
you should check these links:
Configuring LDAP authentication - IBM Documentation
QRadar - Group Based Authentication (LDAP/Active Directory) - YouTube
You'll need to map your QRadar groups with your AD groups. Then all you need to do is assign the good AD group to your users and they'll be able to connect directly without requiring the user to be creted on QRadar.