Manage roles in the Mend Platform
Overview
System Admins are responsible for managing user roles within the Mend Platform. This document provides a technical guide for System Admins to control and configure user roles effectively.
After assigning all relevant users to a particular group, you can assign a role to the group which will apply the required permissions to all its users.
Mend Platform Roles and Permissions
Role | Permissions |
---|---|
Admin | Admins have access to any configuration or feature within the organization context. They can manage users and other entities such as groups, labels, etc. In addition, they can execute scans and edit scan data. |
Security Analyst | Security Analysts are responsible to the triage process of all security findings. They can review scans & findings data and take the needed actions to either resolve issues or suppress if needed. |
Scan Manager | Scan Managers can execute security scans using Mend CLI or through the Repository Integrations. They can configure and change the organization structure by adding new applications/projects and making the needed structure changes. |
Member | Members have access to Mend Platform for viewing purposes. They can review all available data in dashboards and drill-down to visualize projects, scans, and security findings data. Members can’t access administration or configuration capabilities and can’t impact data with actions. |
Getting it done
Assign a Role to group(s)
Log into the Mend Platform.
Click the settings gear in the top right corner of the page.
Click Administration to navigate to the Administration page.
Click Groups in the left Administration list to navigate to the Groups management page.
Click on the group name you would like to assign roles for.
Click Roles.
Click the + Add Role button.
Select which role to assign to the selected group. The role can be given at the Organization level or a specific Application (project).
Delete Group Role
Select the relevant group in the Groups table.
Click Roles.
Unselect the role you would like to delete from a specific group.
Click on the “OK” button in the pop-up message window to delete to Group Role.