Preview
This guide is a preview. Its content may change.
Permissions, Roles, and Login Settings#
When You Need Help
These are frequently asked questions about who should get which permissions and how to keep logins secure.
FAQ#
A. I want to set up multi-factor authentication (MFA), or make it mandatory
You can set up two-factor authentication with a one-time password (TOTP) at login. You can also make it mandatory for all users in your organization. This requirement applies only to users who log in with a password. To require it for users who log in with Google or SSO (SAML), configure it on the provider side. You can check each user's setup status on the management screen.
B. Is there protection against attacks that try passwords over and over?
After a certain number of failed password attempts, the account is locked for a set period.
C. I can't set my password
See the related article below.
D. I can't find my API token
See the related article below.
E. How should I assign permissions (roles)?
What a user can see and do is determined by their permissions in the organization and in each group. Deciding who gets which permissions during initial setup saves confusion later. For the types of permissions and how they differ, see User Management.
The only difference between Owner and CSIRT permissions is whether the user can handle billing and change organization information. With either permission, the user can view, edit, and configure all group sets and groups. CSIRT permission is available on the CSIRT plan (Setting User Permissions).
Troubleshooting#
If this page does not solve your issue, contact us through the support contact form with the affected user, the permissions you want to grant, and the current behavior.