How to Add a New Role

Use the following steps to add a new Role:

1. From the left-side navigation menu select "Settings" at the bottom of the menu.
2. Select "User Management" from the menu.
3. The "User Management" page opens.
4. Select the USER ROLES tab.
5. In the top right of the screen, click the blue + Add Role button.
   
   
6. The "Create New Role" page opens.
   
   Note: By default, all users assigned to a custom role have access to the following Spirion Sensitive Data Platform pages (pages only):
7. • SPIglass™ Dashboard
   • Data Asset Inventory (including the SDV3 dashboard, Targets, and Tags)
   • Agent Management
   • Scans
   • Playbooks
   • Reports
7. Specific Spirion Sensitive Data Platform objects, such as specific Agents, Targets, Tags, Scans, Playbooks, or Reports. These objects are accessed and/or managed by users as set by the role they are a member of (role-based access control). The objects the User Role can access can be configured after the role is created.
   
   IMPORTANT! By default, user access to all Tags, Targets, Scans, Playbooks, and Reports is denied (excluding to those objects the user created before being assigned to their role).
8. On the Create New Role page, complete the following:
9. 1. Type a name in the Role Name box.
      
      
      Note: User Role names must be unique.
      
   2. Select the appropriate access for each Area shown - View and Manage.
      
      
      Note: Custom roles do not have access to existing scans, playbooks, or reports by default. Permissions to Read or Manage these resources are handled in the subsequent step.
9. Click the blue Review button.
10. The Verify New Role Configuration pop-up window opens.
11. Review the permissions you have granted for the new role.
    
    
12. Click the Confirm button to create the new role or click the Cancel button to discard your changes.
13. On the TAGS / TARGETS tab, select any relevant tag groups or targets for the role.
    Select either of the following options:
14. • All Targets
    • Custom tag (which is Inherited by default)
      
      
14. From the kebab menu at the right of the desired Tag or Target, select Edit Permissions.
    
    
15. In the Edit Tag Permissions pop-up window controls, select from the following:
16. • Partial or full visibility of matches against the Tag or Target.
    • Whether users can add Targets or create nested Tags when working with manual Tag types.
    • Enables Modify access to be assigned to edit target details
      
      
16. Click the Confirm button to save the settings or the Cancel button to discard.
17. From the top of the page select the SCANS tab.
18. Select which scan(s) the role can access.
19. 1. As previously stated above, Read access enables scans to be executed from the kebab menu from the Scans table on the Scan page (Scans > All Scans).
    2. Select from:
    3. • None
       • Read
       • Manage
         
         
19. From the Playbooks tab, select which playbook(s) should be accessible to the role.
20. As previously stated above, Read enables playbooks to be selected during the scan creation process (if authorized to create scans).
21. Select from:
22. • None
    • Read
    • Manage
      
      
      Note: The Playbook Override option controls whether a role is authorized to perform user-level remediation against the specified Target(s).
22. From the Reports tab, select which report(s) should be accessible to the role.
23. 1. Select one of the following:
    2. • None
       • Read
       • Manage
         
         
         Note: Reports with Read access can be viewed in the console only and exporting is not allowed.