When creating new users on the Axur Platform, it is possible to create different user profiles according to the permissions each user should have. Below, we detail the permissions of each profile, so you will know which type is suitable for your employees.
Profiles and Permissions
Viewer
Users with this profile only have the possibility to view all ticket, credentials of collaborators and/or clients and result information, but cannot perform any actions. The ideal profile for those who only need to perform queries.
Practitioner
This profile grants users the ability to view all ticket information, similar to the Viewer profile. They can also perform certain actions, such as validating tickets in the “Open”, “Quarantine” or “Incidents” list, and checking for flagged changes. However, they are not authorized to request Takedowns. Addition of status, tags, and others in data leak detections for employee and customer credentials.
In addition, this profile limits the view to other tabs such as:
Automation.
My team
Plan & Usage
Invoices
Creation of users
Limitations to other workspaces as defined by the Manager User.
Expert
The Expert profile combines all the functionalities of the previous profiles (ability to view and modify tickets) and also includes the ability to request Takedowns and investigation requests. Addition of status, tags, and others in data leak detections for employee and customer credentials.
Additionally, this profile limits the view to other tabs, such as:
My team
Pan & Usage
Invoices
Creation of users
Limitations to other workspaces as defined by the Manager User.
Manager
The Manager profile combines all the functionalities of the Expert profile, adding the ability to manage users in Axur One and manage sensitive information about Executives & VIPs. As a Manager, you can view, create, and edit users.
Users with this profile have full access to all Threat Hunting databases.
This profile allows:
Access to all workspaces.
Administration of Executive data if the service is contracted.
Grant access to specific Threat Hunting databases for different user profiles of lower hierarchy and also from the Credentials area.
Custom
You can also create users without a profile mentioned above and with specific permissions such as:
View, add, and edit monitoring settings.
View, add, and edit automations.
View, add, and edit the safelist.
Request takedowns.
Request investigations.
Addition of status, tags, and others in data leak detections for employee and customer credentials.
In addition to selecting which permissions the user will have, you can define which areas the user will have access to.
How to set up
It is possible to modify a user's profile after their creation or at the time of their first registration.
Attention!
If a user needs multitenant visibility — that is, access to more than one client under the same login — their account must be created in the primary tenant.
If the user is created in a secondary tenant, they will have visibility only of that secondary tenant.
1 – To create a profile from the initial registration, access Settings > My team > Add users.
2 – Fill in the user's information and choose the language, afterward, they will receive a first-access email in the desired language.
3 – Finally, you will have the option of selecting the desired profile for that user according to their access.
Modify the profile of an already registered user
1 – Access Settings > My team and search for the person whose profile will be changed in the user list, then click on edit.
2 – During editing, you can select from different profiles, and if you want to further limit access within the profile, you can complement the access to specific assets or ticket types.
Why is this important?
An organized and segmented operation will help you manage the platform more effectively, with each analyst looking at a different part of the platform and focusing on key tasks. This way, you don't overload your management with responsibilities and ensure a more seamless workflow.
Important! Any changes to a user's profile can only be made by a user with a Manager profile.
Would you like to change your user profile?
Please contact the Manager User of your company.
If you have any questions, feel free to reach out at [email protected] 😊