Configure access to the tenant's user administration and authentication settings.
Set permissions for Users, Roles, User Groups, and Authentication Settings under Access Management ( → → ).
Caution
SSO Configuration Risk: Granting View/Edit access allows users to modify the tenant's Single Sign-On (SSO) and authentication settings. Misconfigurations can cause tenant-wide lockouts. Ensure only authorized identity or infrastructure administrators hold this permission.
Auditing is Mandatory: It is highly recommended that any user managing access also has visibility into the Auditing module to track changes.
IT Admin: Unlike other modules, IT Admins require full View/Edit access here for user provisioning and SSO duties.
Permission | Description | Roles Example |
|---|---|---|
None | No access to Access Management. | SOC Tier-1 and 2 Analysts and Threat Hunter: No need to manage users or roles. |
View | Read-only access to users, roles, and groups. |
|
View/Edit | Full access to create, modify, and delete users, roles, and groups, including configuring SSO settings. |