About this Article
This article offers details about the standard CMS User Roles and their associated permissions.
VSP offers a feature to establish User Roles and their permissions for various CMS functionalities. There are five preset roles available. Users can either be linked to these default roles or create new customized roles.
The CMS includes five standard roles: Super Admin, Auditor, DevOps Admin, Infrastructure Admin, and SecOps Admin. Each of these roles possesses Read access across all modules.
The following table outlines the Manage or Edit rights for each role at the sub-module level:
Sub-Module | Super Admin | Auditor | DevOps Admin | Infrastructure Admin | SecOps Admin |
|---|---|---|---|---|---|
Application Privileges | |||||
Discovered Applications | ✔ | ✔ | |||
Provisioning | ✔ | ✔ | |||
Application Privileges Logs | ✔ | ✔ | ✔ | ||
LFI RFI | ✔ | ✔ | ✔ | ||
Application Incidents | ✔ | ✔ | ✔ | ||
Web Profile | ✔ | ✔ | |||
File Events | ✔ | ✔ | |||
Host Privileges | |||||
Host Profile Management | ✔ | ✔ | |||
Application Control Policies | ✔ | ✔ | |||
Host Incidents | ✔ | ✔ | |||
Protection Engine | |||||
Protection Actions | ✔ | ✔ | |||
Protection Profiles | ✔ | ✔ | |||
Manage Access | |||||
Users | ✔ | ✔ | ✔ | ✔ | ✔ |
Roles | ✔ | ✔ | ✔ | ✔ | ✔ |
LDAP | ✔ | ✔ | ✔ | ||
SAML | ✔ | ||||
Reports | |||||
Scheduled Reports | ✔ | ✔ | ✔ | ✔ | ✔ |
Report Settings | ✔ | ✔ | ✔ | ✔ | ✔ |
Configurations | |||||
Dashboard | ✔ | ✔ | ✔ | ✔ | ✔ |
Email Notifications | ✔ | ✔ | ✔ | ✔ | |
Threat Intelligence Settings | ✔ | ✔ | ✔ | ||
License Manager | ✔ | ✔ | ✔ | ||
MSSP Proxy Settings | ✔ | ✔ | ✔ | ||
Incident Data Publishing | ✔ | ✔ | ✔ | ||
System Integration | |||||
Ticket System | ✔ | ||||
Syslog Server | ✔ | ||||
Splunk | ✔ | ||||
Webhook Config | ✔ | ||||
Deployment | |||||
Location Management | ✔ | ✔ | |||
Probe Management | ✔ | ✔ | |||
Analysis Engine | ✔ | ||||
Installation Settings | ✔ | ||||