In QRadar, which component controls data visibility for users based on their assigned permissions?

The component that effectively controls data visibility for users in QRadar based on their assigned permissions is user roles. User roles define what a user can see and do within the QRadar interface, which includes access to certain data, alerts, and configurations based on the specific permissions assigned to that role. This role-based access control ensures that sensitive information is only accessible to authorized users while providing different levels of access depending on the responsibilities of each user within the organization.

Security profiles, while related to user permissions, are more about defining security settings and are not the direct means by which data visibility is managed. Data retention settings govern how long data is stored but do not influence user access to that data. Search filters allow users to specify and refine the data they wish to retrieve but do not control user permissions or visibility on their own.