Custom User Roles

A custom role consists of the role name and action permissions. While creating a custom user role, you can also assign the custom user role to user accounts.

Tips and Tricks

• To view all action permission options, click the Expand All option to the left of the Action Permissions section name. Click the Collapse All option to display only the action permission section names.
• To view all permission options within a section, click the arrow located to the right of the section name.
• To view and enable all permissions within a section, click the toggle to the left of the section name to change it to green. To disable all permissions within a section, click the toggle to change it to grey.
• When you enable at least one option within an action permission section, the section’s toggle changes to green.

Creating a Custom User Role

1. From the User Management page, click the Roles tab.
2. Click the Create Role button. 
3. Enter a name for the custom role in the Role Name field.
4. Select the action permissions for the custom role.
   See the Action Permissions and Interdependent Permissions topics for more information on each permission option.
5. To assign the default role to a user account, use the Search to add field to locate the user account.
   • Begin typing the name of the user account to which you want to assign the role.
     The field displays the user accounts that match your entry.
   • Click the user account to which you want to assign the role.
6. Repeat step 5 to continue adding the custom user role to multiple user accounts.
7. Click the Save button.

Assigning a User Role to a User Account

You can use the following methods to assign a user role to a user account:

• Access the desired user role and use the Search to add field in the Role Assignment section.
• Access the current user role and use the Reassign option in the Role Assignment section.
• Access the user profile and select a new user role.
• Assign a custom role to the user account during the process of creating a custom role.

When you assign a new user role to a user account that already has a user role, the existing user role is replaced with the new user role.

Assign a User Role From the Desired User Role

1. From the User Management page, click the Roles tab.
2. Browse the Roles list or use the Search field to locate the user role you want to add to the user account.
3. Click the user role to view its details in the right pane.
4. To assign the default role to a user account, use the Search to add field to locate the user account.
   • Begin typing the name of the user account to which you want to assign the role. The field displays the user accounts that match your entry.
   • Click the user account to which you want to assign the role.

     Until you save your changes, a Remove option is displayed to the left of the user name. This option allows you to remove the user account from the custom role before saving your changes.

5. Repeat step 4 to continue adding the custom user role to multiple user accounts.
6. Click the Save Changes button.

   The new user role is assigned to the user account whether the user account does or does not already have a custom or default user role.

Assign a User Role from the Current User Role

1. From the User Management page, click the Roles tab.
2. Browse the Roles list or use the Search field to locate the user account’s current user role.
3. Click the user role to view its details in the right pane.
4. In the Role Assignment section, locate the user account.
5. Click the Reassign option next to the user account.
6. In the Reassign to New Role window, select the desired user role.
7. Click the Reassign button.
8. Click the Save Changes button.

Updating a Custom User Role

1. From the User Management page, click the Roles tab.
2. Browse the Roles list or use the Search field to locate the user role you want to update.
3. Click the user role to view its details in the right pane.
4. Enter your changes to the role’s name and/or action permissions. You can also update the user accounts to which the user role is assigned.

   If you remove an action permission that disables a related permission, ThreatQ displays an Additional Updates Required prompt window that guides you through the changes.  See the Interdependent Permissions topic for more information.

5. Click the Save Changes button.

   When you update a role’s permissions, the users assigned to the role must log out and log in for the permission changes to take effect.

Deleting a Custom User Role

1. From the User Management page, click the Roles tab.
2. Browse the Roles list or use the Search field to locate the user role you want to delete.
3. Check the checkbox next to the user role to view its details in the right pane.
4. Click the delete/trashcan button.
5. If user accounts are assigned to the user role:
   • The Reassign Users & Remove Role window prompts you to select a new user role for the user accounts and click the Reassign & Remove button to save your selection.
6. If no user accounts are assigned to the user role:
   • The Are you sure? window prompts you to click the Remove button to confirm the deletion.