Skip to main content

Access Control

Access Control at Organization Level

View Account Roles Page

Go to Settings > Access control > Account roles to display the account roles. You can view the Name, Description, and User group on this page.

Click on each role to display the list of users with this role. From the list, you can view the Name, Type, and Accounts to which the user has access.

View Account User Groups Page

Go to Settings > Access control > Account user groups to display all account user groups. You can view the Name, Description, Role, and Number of users on this page.

Click on each user group to display detailed privileges to which the user group has access.

View Users Page

Go to Settings > Access control > Users to display all users within your organization. You can view Name, Type, Org access, Last login, and State on this page. The Last login column displays the updated timestamp when you log in. If you have not logged in before, the Last login column displays -- instead of a timestamp.

Click on each user to display details of the user, including email address, company, user group, and scope to which they have access.

Use controls to add, enable, or disable individual users. To edit or delete a user, click the Ellipsis (...) icon and select Edit or Delete.

note

You cannot edit a user's email address or company.

Actions for the user list include the following:

  • Refresh data.
  • Download the user list as a CSV.
  • Select which columns to display in the list.
  • Filter by the user type or user group.
  • Search for specific users.

Add Users

Click + Add new to add a user. For detailed information about adding team members, see Access Control at Organization Level.

Access Control at Account Level

View Roles Page

Go to Settings > Access control > Roles to display the account roles. You can view the Name, Description, and User group on this page.

Click on each role to display detailed privileges to which the role has access.

Actions for the role list include the following:

  • Refresh data.
  • Download the role list as a CSV.
  • Select which columns to display in the list.
  • Search for specific roles.

View User Groups Page

Go to Settings > Access control > User groups to display all account user groups. You can view the Name, Description, Role, and Number of users on this page.

Click on each user group to display all users of this group within this Lacework account. From the list, you can view the Name, Type, and Email/Unique ID.

Actions for the user group list include the following:

  • Refresh data.
  • Download the user group list as a CSV.
  • Select which columns to display in the list.
  • Search for specific user groups.

View Users Page

Go to Settings > Access control > Users to display all users within this Lacework account. You can view Name, Type, Email/Unique ID, Last login, and State on this page. The Last login column displays the updated timestamp when you log in. If you have not logged in before, the Last login column displays -- instead of a timestamp.

Click on each user to display details of the user. For Standard users, the user details include name, type, email address, company, user group, and the last activity time. For Service users, the user details include name, type, unique ID, description, user group, the last activity time, and the access key id.

Use controls to add, enable, or disable individual users. To edit or delete a user, click the Ellipsis (...) icon and select Edit or Delete.

note

You cannot edit a user's email address, company, or unique ID.

Actions for the user list include the following:

  • Refresh data.
  • Download the user list as a CSV.
  • Select which columns to display in the list.
  • Filter by the user type or user group.
  • Search for specific users.

Add Users

Click + Add new to add a user. For detailed information about adding team members, see Access Control at Account Level.