Defining Global Admin Users
One Mend Global Admin account can now manage all organizations. Any new organization is automatically assigned a Global Account.
The following user roles can view or manage a Global Admin account:
1. Global Account Admin
A Global Account Admin has elevated privileges and access to a dedicated administration page that provides a range of capabilities:
SAML Configuration:
Configure and manage SAML settings at the Global Account level.Admin Management:
Add or remove Global Admins.Organizations Overview:
View a list of all organizations associated with the account. Direct actions cannot be taken from this view.Reporting:
Export account-level reports via the Account Report Export page.API Access:
Execute API calls specific to the Global Account.Organization Creation:
Create new organizations under the account. The user who creates an organization automatically becomes its admin.
Note: This role does not grant automatic access to every organization within the account. A Global Account Admin might not be a member of all organizations and, therefore, cannot view or manage organization-specific details in those cases.
2. Executive / Read-Only Role
For users who need a view-only experience(executives or CISOs), the Mend SCA platform offers a read-only mode. This mode is designed for users who require insight into the system without the ability to make changes.
Global Account Service Users can also be assigned read-only access, ensuring that service integrations and monitoring can be performed securely without administrative privileges.
Managing Global Admin Account Users
To manage the Global Admin account users, do as follows:
From the Web Console menu bar, select Global Admin.
Under Settings, select Global Admins.
The Global Admins screen is displayed.
On this screen, you can:
View currently defined global admin users
Add new global admin users
Remove global admin users from the list
To add a new global admin user:
Click the Add Admins button.
The Add Admins screen opens, listing all the currently available Admins in the system. For example:Select one or more Admin names from the list, and click OK.
The selected admins will be added to the Global Admins list.
To remove one or more global admins from the list:
Select the relevant user(s) and click the Leave Group button.