Add or edit a user at a system level
System and Organization Administrators can create users individually, in groups, or through Microsoft Active Directory (AD) or LDAP integrations.
A System Administrator or Organization Administrator role is required.
All users are required to have a default organization and a default role within that organization.
SuperAdmin and ServerAdmin roles are designated differently.
When adding an individual user, or multiple users at one time, you can also grant Protect permissions for the users.
Log in as a SuperAdmin or System Administrator.
Select SuperAdmin in the user menu.
Select Users in the header.
Select a user name to edit an existing user or select Add user to add a new user.
Enter the user's First name, Last name and Email address.
Select Require email activations, if you want to use email activation instead of requiring a password.
Select a System roles for the user.
The default role is None.
Select the Organization to which the user belongs.
Select the default Organization role .
Select a custom or default Application access group:
Contrast provides these default groups:
View: Members of this group have read-only access to the Contrast interface to see scores, libraries, vulnerabilities, and comments.
Edit: Members of this group can remediate findings, add tags, manage vulnerabilities, edit attributes, merge applications, add or delete applications, and create servers.
Rules Admin: Members of this group can edit rules and policies in the application, enable Protect, and manage notifications and scoring.
Admin: Members of this group can configure and manage settings for an organization.
Select a Date format, Time format, and Time zone.
To let Organization Administrators change user settings at an organizational level, select Use organization settings.
This option is selected by default.
To create user settings at a system level, clear the this option.:
Clear User organization settings.
To restrict users to using the API only and not the Contrast web interface, .Select Make user API only.
To let the user see and use Assess data, turn on Access.
To let the user see and use Protect data, turn on Protect.
Tip
You can also grant Protect permissions at an organization level.
Select Add or Save.