STIGQter: STIG Summary: Tanium 7.x Application on TanOS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025: STIGQter: STIG Summary: Tanium 7.x Application on TanOS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:SV-254939r961461_rule
V-254939
SRG-APP-000380
TANS-AP-000950
CAT II
10
1. Using a web browser on a system that has connectivity to the Tanium Application, access the Tanium Application web user interface (UI) and log on with multi-factor authentication.
2. Click "Administration" on the top navigation banner.
3. Under "Permissions", select "Users".
4. Analyze the users configured in the Tanium interface.
5. Determine least privileged access required for each user to perform their respective duties.
6. Move users to the appropriate LDAP security group to ensure the user is synced to the appropriate Tanium User Role.
7. If the appropriate LDAP security groups are not already configured, create the groups and add the appropriate users.
8. Ensure LDAP sync repopulates the Tanium Users' associated Roles accordingly.
Consult with the Tanium System Administrator to review the documented list of Tanium Administrators.
1. Review the administrators' respective approved roles, as the correlated LDAP security group for the User Roles.
If the documentation does not reflect a granular, least privileged access approach to the LDAP Groups/Tanium Roles assignment, this is a finding.
V-254939
False
TANS-AP-000950
Consult with the Tanium System Administrator to review the documented list of Tanium Administrators.
1. Review the administrators' respective approved roles, as the correlated LDAP security group for the User Roles.
If the documentation does not reflect a granular, least privileged access approach to the LDAP Groups/Tanium Roles assignment, this is a finding.
M
5492