User Management

Vulnerability ProtectionDeep Security has Users, Roles, and Contacts which are found under Administration > User Management.

A User is a Vulnerability ProtectionDeep Security account holder who can sign in to the Vulnerability ProtectionDeep Security Manager with a unique username and password. Users are assigned a Role which is a collection of permissions to view data and perform operations within Vulnerability ProtectionDeep Security Manager. Contacts do not have a User account and cannot sign in to Vulnerability ProtectionDeep Security Manager but they can be designated as the recipients of email notifications and scheduled Reports.

Role-Based Access Rights and Editing Privileges

Access rights and editing privileges are attached to Roles and not to Users. To change the access rights and editing privileges of an individual User, the User must be assigned a different Role, or the Role itself must be edited.

Role-Based Access to Computers and Policies

The access that Roles have to computers and Policies can be restricted to subsets of computers and Policies. This can be controlled at a fairly granular level. For example, Users can be permitted to view all existing computers, but only permitted to modify those in a particular Group. To edit a Role, go to Administration > User Management > Roles and double-click a Role (or click the New... button) to display the Roles Properties window.

Role-Based Editing Privileges

Within those access restrictions, Roles can have limitations placed on their editing privileges.

User rights

A Role can give Users delegated rights over other Users. That is, the Users with that Role can create and modify the properties of Users only with equal or less access than themselves.

Default Settings for Full Access, Auditor, and New Roles

The following table identifies the default rights settings for the Full Access Role and the Auditor Role. Also listed are the rights settings that are in place when creating a new Role by clicking New in the toolbar on the Roles page.

Note on User Rights

The User Rights area on the User Rights tab of the Role Properties window has three general User rights options (Change own password and contact information only, Create and manage users with equal or less access, and Have full control over all Roles and users) and a Custom option.

The custom settings corresponding to the Change own password and contact information only option are listed in the following table:

The custom settings corresponding to the Create and manage users with equal or less access option are listed in the following table:

The custom settings corresponding to the Have full control over all Roles and users option are listed in the following table: