| \n\nRole title \\[name\\]\n\n | \n\nDescription\n\n | \n\nContains roles\n\n |
|---|---|---|
| \n\nsn\\_sbom\\_response.managelicense\n\n | \n\nThis role is installed with the SBOM Response application.\n\n This role permits you to resolve licenses to components.\n\n | \n\nNone\n\n |
| \n\nsn\\_sbom\\_response.licenseresolver\n\n | \n\nThis role is installed with the SBOM Response application.\n\n This role permits you to view uploaded license information and determines which licenses are permitted and which are banned.\n\n | \n\nNone\n\n |
| \n\nSBOM write \\[sn\\_sbom\\_dm.app\\_write\\], SBOM create \\[sn\\_sbom\\_dm.app\\_create\\], SBOM read \\[sbom\\_dm.app\\_read\\]\n\n | \n\nThese roles are installed with the Data Model for SBOM application.\n\n They permit you to read, create, and edit records in SBOM tables.\n\n | \n\nNone\n\n |
| \n\nSBOM Cores ingests \\[sn\\_sbom\\_core.sbom\\_ingest\\] and SBOM Core admin \\[ sn\\_sbom\\_core.admin\\]\n\n | \n\nThese roles are installed with the SBOM Core application.\n\n The sn\\_sbom\\_core.sbom\\_ingest role permits you to upload SBOMs manually and via the REST API. The sn\\_sbom\\_core.admin role permits you to create, read, edit data, and upload SBOMs.\n\n This role also gives you access to the SBOM Core modules in your instance. It inherits the roles from the Data Model for SBOM application.\n\n | \n\n- sn\\_sbom\\_dm.app\\_write\n- sn\\_sbom\\_dm.app\\_create\n- sn\\_ sbom\\_dm.app\\_read\n\n |
| \n\nSBOM Analyst\n\n \\[sn\\_sbom\\_resp.sbom\\_analyst\\]\n\n | \n\nThis role is installed with the SBOM Response application.\n\n It inherits the sn\\_sbom\\_core.admin role and enables you to access the SBOM Workspace.\n\n | \n\n- sn\\_sbom\\_core.admin\n- sn\\_sbom\\_dm.app\\_write\n- sn\\_sbom\\_dm.app\\_create\n- sn\\_ sbom\\_dm.app\\_read\n- sn\\_sbom\\_resp.manage\\_avi\\_rule\n- sn\\_sbom\\_config\\_rule table\n\n |
| \n\nTable\n\n | \n\nDescription\n\n |
|---|---|
| \n\nSBOM document\n\n \\[sn\\_sbom\\_doc\\]\n\n | \n\nContains the BOM entities you've uploaded.\n\n |
| \n\nSBOM component\n\n \\[sn\\_sbom\\_component\\]\n\n | \n\nContains imported SBOM components, classifiers, and versions that are included in the parent component.\n\n |
| \n\nSBOM component relationship\n\n \\[sn\\_sbom\\_comp\\_relationship\\]\n\n | \n\nContains components and their dependencies.\n\n |
| \n\nSBOM m2m bom component\n\n \\[sn\\_sbom\\_m2m\\_bom\\_comp\\]\n\n | \n\nContains the BOM component mappings.\n\n |
| \n\nSBOM license\n\n \\[sn\\_sbom\\_license\\]\n\n | \n\nContains the open-source license IDs used for components.\n\n |
| \n\nSBOM supplier\n\n \\[sn\\_sbom\\_supplier\\]\n\n | \n\nContains the organization that supplied the component, which might be a manufacturer, distributor, or repackager.\n\n |
| \n\nSBOM component ID\n\n \\[sn\\_sbom\\_comp\\_id\\]\n\n | \n\nContains the component identifiers.\n\n |
| \n\nSBOM component properties\n\n \\[sn\\_sbom\\_comp\\_property\\]\n\n | \n\nContains the component name-value properties.\n\n |
| \n\nSBOM hash\n\n \\[sn\\_sbom\\_hash\\]\n\n | \n\nContains component hashing algorithms.\n\n |
| \n\nSBOM contact\n\n \\[sn\\_sbom\\_contact\\]\n\n | \n\nContains contact information for the supplier.\n\n |
| \n\nSBOM external references\n\n \\[sn\\_sbom\\_comp\\_external\\_ref\\]\n\n | \n\nContains components, component types, and external URLs that document systems, sites, and information that might be relevant but are not included with the SBOM.\n\n |
| \n\nSBOM package group\n\n \\[sn\\_sbom\\_pkg\\_group\\]\n\n | \n\nContains the package group information for every component. Multiple version of libraries may be used across applications. Versions of the same components are grouped and added to this table to avoid pulling the same data multiple times.\n\n |
| \n\nTable\n\n | \n\nDescription\n\n |
|---|---|
| \n\nSBOM creation rule configuration\n\n \\[sn\\_sbom\\_config\\_rule\\]\n\n | \n\nContains AVIT creation rules used in the SBOM Workspace.\n\n |
| \n\nSBOM m2m component vulnerabilities\n\n \\[sn\\_sbom\\_m2m\\_comp\\_vuln\\]\n\n | \n\nContains the components and associated vulnerabilities.\n\n |
| \n\nComponent vulnerability fix information\\[sn\\_sbom\\_comp\\_vuln\\_fix\\_info\\]\n\n | \n\nContains the fix versions for each third-party vulnerability associated to a version of the component.\n\n |
| \n\nComponent report insights\\[sn\\_sbom\\_comp\\_report\\_insight\\]\n\n | \n\nContains insights about stale, abandoned, and fixability data for components.\n\n |
| \n\nDeps Integration Imports\\[sn\\_sbom\\_deps\\_integration\\_import\\]\n\n | \n\nContains imported version list information for a given package or library.\n\n |
| \n\nOSV Integration Imports\\[sn\\_sbom\\_osv\\_integration\\_import\\]\n\n | \n\nContains vulnerability intelligence information for a given version of a package or library.\n\n |
| \n\nComponent Version Lists\\[sn\\_sbom\\_st\\_version\\_list\\]\n\n | \n\nContains version information and published dates for components.\n\n |