diff --git a/docs/getting-started/basic-usage/prowler-mcp-tools.mdx b/docs/getting-started/basic-usage/prowler-mcp-tools.mdx index acb50c9e81..fda40f158b 100644 --- a/docs/getting-started/basic-usage/prowler-mcp-tools.mdx +++ b/docs/getting-started/basic-usage/prowler-mcp-tools.mdx @@ -10,7 +10,7 @@ Complete reference guide for all tools available in the Prowler MCP Server. Tool |----------|------------|------------------------| | Prowler Hub | 10 tools | No | | Prowler Documentation | 2 tools | No | -| Prowler Cloud, Private Cloud & Local Server | 32 tools | Yes | +| Prowler Cloud, Private Cloud & Local Server | 40 tools | Yes | ## Tool Naming Convention @@ -105,6 +105,24 @@ Tools for viewing compliance status and framework details across all cloud provi - **`prowler_get_compliance_overview`** - Get high-level compliance status across all frameworks for a specific scan or provider, including pass/fail statistics per framework - **`prowler_get_compliance_framework_state_details`** - Get detailed requirement-level breakdown for a specific compliance framework, including failed requirements and associated finding IDs +### User Management + +Tools for viewing the users in your tenant and identifying the authenticated user. + +- **`prowler_list_users`** - List the users in the tenant with their names and emails +- **`prowler_get_user`** - Get detailed information about a specific user by ID, including verification status, join date, and role/membership IDs +- **`prowler_get_current_user`** - Identify which user the current credentials (API key or JWT) authenticate as + +### Role Management + +Tools for browsing RBAC roles and managing the roles assigned to a user. + +- **`prowler_list_roles`** - List the roles defined in the tenant with their permission scope +- **`prowler_get_role`** - Get detailed information about a specific role by ID, including granted capabilities, visibility scope, assigned users, and provider groups +- **`prowler_get_user_roles`** - List the roles assigned to a specific user, with the capabilities each role grants +- **`prowler_assign_role_to_user`** - Assign a role to a user, keeping their other roles intact (idempotent) +- **`prowler_remove_role_from_user`** - Remove a role from a user, keeping their other roles intact (idempotent) + ## Prowler Hub Tools Access Prowler's security check catalog and compliance frameworks. **No authentication required.** diff --git a/docs/getting-started/products/prowler-mcp.mdx b/docs/getting-started/products/prowler-mcp.mdx index a30c4e5488..5445b99e9b 100644 --- a/docs/getting-started/products/prowler-mcp.mdx +++ b/docs/getting-started/products/prowler-mcp.mdx @@ -50,6 +50,7 @@ Full access to your Prowler deployment — Prowler Cloud, Prowler Private Cloud, - **Resource Inventory**: Search and view detailed information about your audited resources - **Muting Management**: Create and manage muting lists/rules to suppress non-relevant findings - **Attack Paths Analysis**: Analyze privilege escalation chains and security misconfigurations through graph-based analysis of cloud resource relationships +- **User & Role Management**: List the users in your tenant, identify the authenticated user, browse RBAC roles, and assign or remove a user's roles ### 2. Prowler Hub diff --git a/mcp_server/README.md b/mcp_server/README.md index c0e4fdb0fe..f6d9fb0c77 100644 --- a/mcp_server/README.md +++ b/mcp_server/README.md @@ -16,6 +16,7 @@ Full access to your Prowler data (Prowler Cloud, Prowler Private Cloud, or Prowl - **Resource Inventory**: Search and view detailed information about your audited resources - **Muting Management**: Create and manage muting rules to suppress non-critical findings - **Compliance Reporting**: View compliance status across frameworks and drill into requirement-level details +- **User & Role Management**: List the users in your tenant, identify the authenticated user, browse RBAC roles, and assign or remove a user's roles ### Prowler Hub