Go to Users > User Management, click a user account and select Actions > Edit. Good to Know - Turn on help tips in the wizard title bar and we'll show help as you hover over the individual settings.
Roles define a user's permissions to act on business objects in the subscription. Scope determines which business objects a user is able to access. Business objects include assets such as web applications and reports.
How do I edit a user's role?
There are 2 ways you can do this:
Go to Users > Role Management. Identify the role you want to change and select Edit from the Quick Actions menu. The changes you make will apply to all users with the role assigned. Want to assign roles to users? Just select one or more roles in the list and choose Add to Users from the Actions menu. Then tell us which users should be assigned the roles.
Go to Users > User Management. Click a user account and select Actions > Edit. Go to Roles and Scopes to see the user's assigned roles and make changes.
How do I define a user's scope?
Go to Users > User Management, click a user account and select Actions > Edit. Go to Roles and Scopes and define the user's scope using one of these methods:
Select this option only if you want to permit the user to view all objects in the subscription, including web applications, scans, configurations, reports and tags. This does not change the permissions of the user's roles.
Tags in the user's scope identify the objects the user can access. Select a tag from the menu or start typing its name in the search field. A list of tags displays dynamically. The user will have access to all objects the selected tags are applied to. To remove a tag from the user, click the X to the right of its name.
The initial roles are assigned automatically, based on the user role assigned in the VM/VMDR application. The default permissions for each role are initially set for the subscription. Users with the Edit User permission can change the permission for any role. Permission changes will apply to all users assigned to that role. Learn more
Each user's initial scope is assigned automatically, based on the user role defined in the VM/VMDR application.
Manager - This user is assigned no role initially, and granted full permissions and a global scope.
Unit Manager - This user is assigned a single business unit tag. The tag name corresponds to the business unit title as defined in the VM/VMDR application. For example, if the user is in the business unit "USA" then the user's initial scope has the tag "USA" assigned.
Other users (Scanner, Reader, Auditor, Contact) - This type of user is assigned the tag "Unassigned Business Unit" or a custom business unit tag (and the tag name corresponds to the business unit title).
Tags have two purposes in a user's account settings:
User tags - Tags applied to the detail settings of a user's account associate the user with other users, but have no effect on the user's scope. Users can view other users if they share a common tag.
Scope tags - Tags applied to the user's scope identify the assets the user can access. For example, if a web application is tagged with the Operations tag, users with the Operations tag in their scopes can access that web application. The roles assigned to these users will determine their permissions for the web application.
Want to add or remove tags?
Hover over the user in the user list and choose an action from the menu. Show me
Exclude Agent assets from IP Range Tags?
Any user with the "Edit user" permission. This permission must be assigned in at least one of the user's roles.
Who can view another user's account?
A user can view another user's account settings if both users share a common tag. For example if User A and User B are both assigned the tag Business Unit New York, they will be able to view each other's account settings.
Do you have VM/VMDR? If yes you'll need to create new users within the VM/VMDR application. How to add a new user
In certain cases, you can add users from within the Administration utility. Go to Users > User Management > New User and enter the user information including contact information and locale. You'll need to define the user's roles (what the user can do) and scope (what the user can access).
The user preview pane appears under the list area when you click a row. The preview displays user details like the user's roles, tags and whether the user account is currently active. Show me