Implementing Access Controls for Specific Projects on the Platform

Access Controls in the Platform allow administrators to grant users precise, role-based access to specific parts of the platform, such as Projects, Phases, Questionnaires, Assets, and Asset Groups. This ensures that users only see the information relevant to their responsibilities, maintaining data security and supporting controlled collaboration.

Important Note on User Groups and Access Permissions:

  • If user groups are assigned at the user creation step, these will override individual Access Permissions. The Platform will indicate any ineffective permissions with a conflict badge.

Steps to Assign Access Controls

1. Navigate to Access Controls

2. Create New Permission

3. Select User

4. Define Permission Type

5. Choose Target Entity

6. Set Access Level

7. Finalise and Apply Permission


Managing and Viewing Permissions


Use Case: Asset and Asset Group Access

These permission types are fully compatible with the One Issue View, ensuring users only see deduplicated vulnerability data related to their permitted assets.


Benefits of Granular Access Control


Conclusion

Access Controls are essential for managing visibility and collaboration across the Platform. With the addition of Asset and Asset Group Access, administrators gain more precision and flexibility in shaping secure, role-based access aligned with operational needs and compliance requirements.

Read more

How to Add Users

An Introduction to Permissions

User Roles