Manage Users in the Mend AppSec Platform

Overview

This document guides System Admins through the technical aspects of managing user access within the Mend Platform. It covers new user creation, key responsibilities, and practical steps to ensure secure and efficient access control.

Use Cases

There are three types of users:

An ordinary “human” user;
A non-human "Service User" for the purpose of integration into pipelines, repositories, etc., for example, integrating scanning into GitHub.
A Notification User, for receiving email and workflow notifications only.

Getting it done

Create a New User in the Mend AppSec Platform

Note: Make sure you’ve completed the Groups management process before creating a new user. Please refer to our Manage groups in the Mend Platform documentation.

Log into the Mend Platform.
Click the settings gear in the top right corner of the page.
Click Administration to navigate to the Administration page.

Click Users in the left Administration list to navigate to the Users management page.
Click the + Add User button in the top right corner of the Users table.
Add the new user's email address; you can add multiple email addresses separated by a comma.
Associate the new user/s with their appropriate group.
Click “OK”. The new user/s should receive an email with the activation link to enable their user for the Mend Application.

Remove or Disable an Existing User

Navigate to the Users management page.
Click on the Actions button, and select Remove or Disable.

Click OK or Disable User in the pop-up window to complete the action from the previous step.

If you opt to disable a user, their status will change accordingly:

Note: A user’s status will automatically change to Disabled when they get locked out of the platform after five attempts to log in using the wrong password.

Repeat the steps and choose Enable to resintate the user’s access to the platform.

Remove Multiple Users

Check the corresponding checkboxes next to the names of the user(s) you wish to remove.