Role Management

^{Last Updated: 2024-12-10}

Purpose

This article describes the procedure to manage roles in the portal.

Introduction

In Outpost24’s portal, Role Management provides the framework for defining what actions each user is allowed to perform across the system. Through IAM (Identity & Access Management), administrators can create or modify roles by assigning granular permissions on modules such as assets, scans, tags, reports, and integrations. Roles establish the level of access—whether viewing, managing, or denying functions—so users only see and act on what their position requires. This ensures both security and flexibility by enforcing least privilege while enabling custom authorization tailored to your organization’s structure.

Accessing IAM

To navigate to this section, 

1. Log in to the Portal. See the Logging in to the portal article for the different ways to access the Portal view.

2. Click the Account icon in the upper right corner.
   Note that the initials in the icon may change depending on username.
   

   

   
   

3. In the context menu, select Identity Access Management (IAM) to access the IAM page.
   

   

   
   

This displays the Identity Access Management page which is divided in three tabs, Users, Roles, and Resource Groups.

Roles Management in IAM

A user role is a role by which the user is able to operate the resources they have been granted access to. Roles consist of one or more permission, for example, the Analyst role would have Findings permission set to View. For multiple roles, the user is given the highest level of capabilities granted to any role to which they are assigned. For example, if a user is assigned to the role Admin which has the most capabilities, and also to a role Operator with a different set of capabilities, the user will have the capabilities of both roles. A user with no roles would not have any access at all.

This view presents the detailed information about the permissions to access different modules for the available roles. 

Available Resources

Add Roles

To add a role,

1. Click on the +Add role button located on the bottom right of the window. It opens the below dialog:
   

   

2. Provide a name for the role.

3. Under each category, different permission levels are listed.  

4. Select the necessary permission level to grant for that role.

5. After adding all permissions, click ADD.

The newly added role is shown in the ROLES view. 

The roles added by the user can be customized or deleted. Select a role and click on the respective icon to edit or delete. 

Edit / Update an Existing Role

Clicking on the edit icon opens the below dialog:

Make the necessary changes and click UPDATE to save the changes made to that role.

Delete Role

When you click on the Delete icon: 

1. If the selected role is not assigned to any user, the below message is displayed:
   

   

   
   

2. If the selected role is assigned to any user, the below message is displayed:
   

   

   
   

3. Click DELETE to confirm.