# Required permissions

Users with the following permissions may create, view, and update investigations.

| **Resource / Action**      | **Description**                                                                                                                 | **Notes**                                                                                                                                                                                               |
| -------------------------- | ------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `investigations:Read`      | View investigations by invitation.                                                                                              | Users must have this permission in order to be invited or assigned to an investigation or tagged in the Activity timeline.                                                                              |
| `investigations:Update`    | Create and update your investigations, as well as private invitations to which you have been invited and those that are public. | Users with this permission should also have the `investigations:Read` permission.                                                                                                                       |
| `investigations:ReadAll`   | View all investigations in the system, regardless of invitation.                                                                | Generally reserved for administrators and/or managers responsible for tracking the progress of all investigations.                                                                                      |
| `investigations:UpdateAll` | View and update all investigations in the system, regardless of invitation.                                                     | Users with this permission should also have the `investigations:ReadAll` permission. Generally reserved for administrators and/or managers responsible for tracking the progress of all investigations. |

## Next steps

Start your first investigation by following the steps in [Create an investigation](https://coralogix.com/docs/user-guides/investigations/create-an-investigation/index.md).