Tanium’s flexibility shines when it’s customized to meet the needs of specific teams like the help desk. In this episode, Ashley and Matthew explore how new customers can optimize their Tanium setup for speed, clarity, and compliance.
Drawing from his experience as a Tanium Certified Operator and Administrator, Matthew walks through how to build custom content sets, configure role-based access control (RBAC) roles, and create tailored Single Endpoint Views that empower help desk teams to close tickets faster and learn more effectively.
What makes this episode stand out is its practical, customer-driven perspective. Matthew doesn’t just demo features—he explains why they matter, how they fit into broader compliance frameworks like NIST 800-171, and how Tanium’s real-time data capabilities can transform endpoint management.
Whether you're a new admin or a seasoned pro looking to delegate access more effectively, this episode offers a blueprint for customizing Tanium to meet your organization’s needs.
Key takeaways
- Start with a plan: Before diving into configuration, document your requirements and naming conventions.
- Create custom content sets with sensors and packages: Matthew shows how to build content sets that include sensors, packages, and dashboards tailored to help desk workflows, and explains how these sets integrate with RBAC roles.
- Define RBAC roles precisely: Configure minimal permissions such as Interact Show, Read Package, and access to the single endpoint view. Matthew explains the difference between “Allow” and “Deny” roles and highlights the importance of excluding modules like Reporting and Collection Registration.
“Give them what they need to learn, but also only what they need.”Tanium Certified Operator and Administrator Matthew
- Link users to permissions via personas: Personas act as permission buckets that connect user groups to roles and content sets. Matthew walks through how to create personas, assign them to help desk users, and manage edge cases like terminated accounts using Deny All personas.
- Configure single endpoint views with TDS: To make sensors visible in endpoint views, they must be enabled in Tanium Data Service (TDS). Matthew demonstrates how to edit the view, assign it to content sets, and ensure help desk users see only relevant data like endpoint location and connected devices.
“Help desk wants to see certain things relative to their endpoints… we’ve put that panel into a content set that only shows up when the help desk logs in.”Tanium Director, Product Enablement Architecture Ashley McGlone
- Deploy packages for real-world use cases: Matthew shares examples of packages that automate tasks like tagging endpoints with location data, installing browser extensions via sensor input or extension ID, and pushing Wi-Fi profiles with SSIDs and keys to endpoints.
- Empower help desk teams with delegated authority: The episode wraps with a demo of the help desk experience, showing how limited permissions and custom views can accelerate ticket resolution while maintaining security and compliance.
“It’s not ‘Can Tanium do it?’ It’s, ‘Okay, how can we make this happen?’ I’ve never run into an issue that I can’t solve with Tanium, honestly, because it’s just so powerful.”Tanium Certified Operator and Administrator Matthew
Additional resources
- Tanium RBAC tutorial – Tech Talks #81
- Mastering RBAC: Best practices for organizational segmentation - Tanium Tech Talks #106
- Strengthen your cybersecurity strategy with NIST CSF 2.0—download Tanium’s guide to operationalizing governance, resilience, and compliance
- Start your Tanium certification journey today