Is there any documentation of the required permissions for each API endpoint?

[drmason13]

Hello Falconpy community!

I'm sure loads of you have managed to setup permissions just fine, possibly with a bit of trial and error.

But is there anywhere that records the permissions required to perform each API action?

Specifically I think I'm looking for permissions to get detections.

If there was also a chance to get pointed to how to configure those permissions in Crowdstrike I'd appreciate it, thank you.

[jshcodes]

Hi @drmason13 -

For the QueryDetects or GetDetectSummaries operations, you will need the Detects READ scope. This can be configured for your API client within the Falcon Console. (Menu (upper left) -> Support & Resources -> API clients and keys).

Regarding providing this detail for all operations, this request is in flight. This detail should be showing up on falconpy.io soon. 😄