The entitlements in the "TAP Federated Group" in the Trellix Cloud Account are granted to admin users in the parent organization to view and manage child organization alerts and cases, and to view and manage connected appliances in child organizations.
The appliance.role.admin entitlement is granted to admin users in parent and child organizations to enable global intel feed sharing on their organizations.
The tap.federated.intel_feeds entitlements are granted to admin users in parent and child organizations to enable federated intel feed sharing on their organizations.
See the Helix Enterprise Product Guide and Trellix System Security Guide for details.