Update Existing Users

To update an existing user:

Navigate to the User Management page.

Select Update Existing User.

Use the dropdown menu to locate and select the user you wish to edit.

The Update User form will load with the user’s current details, which you can modify. Editable fields include:

• Full Name: Update the user's full name.
• Password: Enter a new password if required. Click the eye icon to toggle password visibility or the key icon to generate a new password.
• Alerts: Choose whether the user should receive system alerts. If enabled, you can also specify the alert types.
• Auth Type: Specify the authentication method (e.g., Local).
• User Role: Assign a new role to the user. Available roles include:
  • Systems Administrator: Access to all functionalities.
  • Security Administrator: Access to everything except for user management.
  • Departmental Manager: Access to Data, Vulnerability, Secure Baseline, Mitigation Dashboards, and "My Mitigation Plans."
  • Departmental User: Access to "My Mitigation Plans."
  • Executive: Access to Data, Vulnerability, Secure Baseline, and Mitigation Dashboards.
  • Auditor: Read-only access.
  • Notification: For receiving notifications only.
• Mitigation Manager: Toggle this setting to grant or remove mitigation manager permissions.
• Email and Alternate Email: Modify the user’s primary or alternate email addresses.
• Department: Assign or update the user's department.
• Department Manager: Specify or update the user's associated department manager.
• User Account: Enable or disable the user's account as needed.

Once edits are complete, click Submit to save changes, or Cancel to discard edits.

Additional options include:

• Reset User MFA Registration: Clears multi-factor authentication settings for the user.
• View Encryption Passwords: Displays the encryption passwords assigned to the user.

Add New Users

To add a new user:

Navigate to the User Management page and click Add New User.

The New User form will appear, allowing you to input user details. Required fields are marked with an asterisk (*). The fields include:

• Full Name: Enter the user's full name.
• Password: Set the user's password. You can use the key icon to generate a secure password.
• Alerts: Enable or disable alerts for the user. If enabled, select the specific alert types from the dropdown.
• Auth Type: Specify the authentication method (e.g., Local).
• User Role: Assign a role to the user from the following options:
  • Systems Administrator
  • Security Administrator
  • Departmental Manager
  • Departmental User
  • Executive
  • Auditor
  • Notification
• Mitigation Manager: Choose whether this user will act as a mitigation manager.
• Email and Alternate Email: Provide the user’s primary email, which will also populate the User Name field automatically, and optionally an alternate email address.
• Department: Assign the user to a department.
• Department Manager: Specify the department manager.
• User Account: Set the account status to Enabled or Disabled.

Once all fields are filled, click Submit to add the user, or Cancel to discard the process.

Navigation and Additional Information

• Departments: You can manage user departments directly from the Departments button at the top of the User Management page.
• Reset MFA Registration: Use this option to reset the multi-factor authentication for an existing user.
• View Encryption Passwords: This option provides visibility into the user’s assigned encryption passwords for secure access.