User and role administration

Securing and managing APIs requires policy building, monitoring, and threat mitigation activities that may require efforts from multiple organizational job roles. Users can be assigned one of these five roles—Admin, Developer, Security Infosec, Security Operations, and Demo. These user roles map to the job roles required for managing and securing APIs.


Add user

AppSentinels user accounts are created using the email address of the user. Upon adding a user by their email address, an invitation email is sent to the user. After accepting the invite, the user must set a password for the account.

  1. Go to More > Settings > User & Role Administration.
  2. Click the Add User icon, enter the email address, select a user role, and click Add.

See Role privileges to decide upon the user role for the user.


Change user role

The user role assigned to a user can be changed at any time. For user role change to take effect, the user must log out and log into their account.

  • Click the Edit icon in the Actions column, assign a new role in the Role column, and then click the green tick mark in the Actions column.


Delete user

Delete a user account to revoke their access to AppSentinels. Deletion takes effect immediately—an ongoing login session is terminated when the user account is deleted. 

  • Click the Delete icon in the Actions column, and click Yes in the confirmation modal.

Role privileges

Here is the list of privileges available for user roles in AppSentinels.

Security Infosec Security Operations Developer Demo Admin
Dashboard Read Read Read Read Read
Defend Read
Modify
Delete
Read No No Read
Modify
Delete
API Catalogue Read
Modify
Download
Read
Modify
Download
Read
Download
Read
Download
Read
Modify
Delete
Download
Parameter Catalogue No No No No Read
Modify
Threat Actors Read
Modify
Read
Modify
Read Read Read
Modify
Events Read
Modify
Download
Read
Modify
Download
Read
Modify
Download
Read
Download

Read
Modify
Download
Vulnerabilities Read
Modify
Download
Read
Modify
Download
Read 
Modify
Download
Read
Download
Read
Modify
Download
Health Read Read No No Read
Insights No No No Read Read
Write
Download
Settings No No No No Read
Write
Modify
Delete

Need AppSentinels support?

AppSentinels'Customer Support team can be allowed to access a customer's Dashboard for troubleshooting or configuration purposes. The Customer Support team will have administrative access to the Dashboard.

To allow the AppSentinels customer support team to access the Dashboard, set Allow access to AppSentinels support team to ON.