Chat now with support
Chat with Support

Security Management Platform Global Settings Current - User Guide

Working with Security Management Platform Global Settings Overview of Security Management Platform Global Settings Signing up for Security Management Platform Global Settings Managing organizations and regions Adding users and groups to an organization Managing your Microsoft Entra tenants and on-premises domains Security Management Platform Home page Configuring settings Documentation roadmap Technical Support

Access Control: Roles

Each access control role has a specific set of permissions that determines what tasks a user assigned to the role can perform. Your Security Management Platform organization comes configured with a number of default roles. The default role permissions settings cannot be changed, but you can create custom roles with specific permission settings to align with your company policies.

 
* 
NOTE: To manage access control roles, you must have the permission "Can create, delete, and assign access control roles".

Perform the following tasks from the Setting | Access Control | Roles page:

•
Viewing role permissions
•
Creating a custom role
•
Editing a custom role
•
Assigning a role to a user
•
Deleting a custom role

Viewing role permissions

Use the Roles page to view the list of roles defined for your organization. You can also view the users assigned to each role.

To view roles and permissions
1
In the left side navigation panel, click Settings, expand Access control and select Roles.
2
Click on a role name to open a read only page that displays the Role Permissions.
The panel on the right is a list of users assigned to the role.
3
To add users to the role, see Adding a user to your organization and assigning a role.
4
To add groups to the role, see Adding a group to your organization and assigning a role.

Creating a custom role

You can create roles with a custom set of permissions. Default roles cannot be edited. You must create a custom role to enable editing.

To create a role
1
In the left side navigation panel, click Settings, expand Access control and select Roles.
2
At the top right of the Roles page, click Create Role.
NOTE: You can define a role based on an existing role. In the Roles list, click on the Action menu for a role and select Duplicate.
3
On the Create Role page, enter a Role Name and Description.
4
Under Role Permissions, select the check boxes for the permissions you want to assign to the role.
Some role permissions are partitioned into services. If available, you can configure access to a service using the Selected Services field.
5
At the top right of the page, click Create Role.
You are returned to the Roles page and there is a prompt to Assign Users.
6
To add a user to the role, click Assign Users.
7
In the Add User to <custom_role> field, enter the email address of the user you want to add.
8
Click Add User.
If the user is not currently a member, they are added to the organization.

Editing a custom role

Note that you cannot edit a default role. You can duplicate a default role and edit it to create a custom role.

To edit a role
1
In the left side navigation panel, click Settings, expand Access control and select Roles.
2
In the Roles list, click on the Action menu for a role and select Edit.
3
On the Edit Role page. you can edit:
Name
Description
Role Permissions.
Some role permissions are partitioned into services. If available, you can configure access to a service using the Selected Services field.
4
Click Save.
You are returned to the Roles page and there is a prompt to Assign Users.
5
To add a user to the role, click Assign Users.
6
In the Add User to <custom_role> field, enter the email address of the user you want to add.
7
Click Add User.
If the user is not currently a member, they are added to the organization.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating