Access management
Roles
Roles is a collection of permissions that you can apply to users. There are two types of roles:
- System specific roles - allowing access to the whole application. User can have only one System role at a time.
- Project specific roles - users get specific access to one or multiple projects. Users We recommend to assign users the fewest number of permissions that allow them to get their job done.
Project roles
-
Owner : users creating a project have the roles of Owner assigned to them. Owners have complete control over projects. They can delete a project, rename it, they can add resources to it, export reports and trigger scans and updates. Only Owners can manage access to a project.
-
Editor : users with a role of Editor can manage project’s resources. Editors can export reports and trigger updates. Editors cannot delete a project. Editors cannot add users to a project or change existing roles.
-
Viewer : viewer role is read only. Viewer has access to the projects they’ve been invited to. Viewers cannot perform any actions - scan, delete, rename, etc. Viewers cannot add users to a project or change existing roles.
Add user to a project
Choose a project. Select Manage access. The drawer will open to the right, listing all users that have access to that project. Use the search box to find a user you’d like to add to the selected project. You can also select a name from the dropdown.
Remove user from a project
Choose a project. Select Manage access. The drawer will open to the right, listing all users that have access to that project. Use the Revoke access button next to each user’s name.
Change users’ roles inside a project
Choose a project. Select Manage access. The drawer will open to the right and it will list all users that have access to that project. Use the drop downs next to each user’s name to select a new role.