Map requirements

Review the requirements before you install and use Map.

Tanium dependencies

In addition to a license for the Map product module, make sure that your environment also meets the following requirements.

Endpoints

Supported operating systems

The following endpoint operating systems are supported with Map. Map uses the Tanium™ Client Recorder Extension to gather data from endpoints.

Disk space requirements

The Map database on each endpoint contains a record of the TCP connections from the past 24 hours. The size of this database depends on the number of TCP connections. In most cases, the maximum size of the database is 200 MB.

CPU and memory requirements

The CPU demand on the endpoint averages less than 1%. A minimum of two CPU cores per endpoint is required. The Tanium Client Recorder Extension cannot operate on fewer than 2 CPU cores.

A minimum of 4 GB RAM is recommended on each endpoint device.

Host and network security requirements

Specific ports and processes are needed to run Map.

Ports

Configure firewall policies to open ports for Tanium traffic with TCP-based rules instead of application identity-based rules. For example, on a Palo Alto Networks firewall, configure the rules with service objects or service groups instead of application objects or application groups.

For Tanium as a Service ports, see Tanium as a Service Deployment Guide: Host and network security requirements.

Security exclusions

If security software is in use in the environment to monitor and block unknown host system processes, your security administrator must create exclusions to allow the Tanium processes to run without interference. For a list of all security exclusions to define across Tanium, see Tanium Core Platform Deployment Reference Guide: Host system security exclusions.

User role requirements

Table 3:   Map user role permissions

Privilege	Map Administrator1,2	Map Operator1,2	Map Read Only User1	Map Service Account1,2,3	Map Endpoint Configuration Approver1,2
Show Map Access Map workbench
Map Application Definition Read Read map application definitions
Map Application Definition Write Edit map application definitions
Map Application Configuration Service Register, use, write endpoint configuration items for Map
Map Operator Settings Read Read most map settings
Map Operator Settings Write Edit most map settings
Map Settings Read Read all map settings
Map Settings Write Edit all map settings
Map Endpoint Configuration Approve Approve endpoint configuration items for Map
1 This role provides module permissions for Tanium Trends. You can view which Trends permissions are granted to this role in the Tanium Console. For more information, see Tanium Trends User Guide: User role requirements. 2 This role provides module permissions for Tanium Endpoint Configuration. You can view which Endpoint Configuration permissions are granted to this role in the Tanium Console. For more information, see Tanium Endpoint Configuration User Guide: User role requirements. 3If you installed Tanium Client Management, Endpoint Configuration is installed, and byBy default, configuration changes initiated by the module service account (such as tool deployment) require approval. You can bypass approval for module-generated configuration changes by applying the Endpoint Configuration Bypass Approval permission to this role and adding the relevant content sets. For more information, see Tanium Endpoint Configuration User Guide: User role requirements.

Table 4:   Provided Map Micro Admin and Advanced user role permissions

Permission	Role Type	Content Set for Permission	Map Administrator	Map Operator	Map User	Map Read Only User	Map Service Account	Map Endpoint Configuration Approver
Read Action Group	Micro Admin
Execute Plugin	Advanced	Reserved
Execute Plugin	Advanced	Map
Execute Plugin	Advanced	Trends
Execute Plugin	Advanced	Endpoint Configuration
Read Plugin	Advanced