Permissions Needed to Unsuppress a Vulnerability for a Given Project

The following user roles have the necessary permissions to update the exclusion analysis of a suppressed vulnerability associated with a given project, as well as unsuppress the vulnerability for the project:

A System Administrator

Note:A System Administrator can unsuppress a vulnerability at the project level for any project.

The project’s Security Contact (also called Security Reviewer) or Developer Contact (also called Remediation Developer)

A user who does not have one of these roles can neither access the exclusion analysis for the suppressed vulnerability nor unsuppress the vulnerability.