Access Control
Access Control at Organization Level
View Account Roles Page
Go to Settings > Access control > Account roles to display the account roles. You can view the Name, Description, and User group on this page.
Click on each role to display the list of users with this role. From the list, you can view the Name, Type, and Accounts to which the user has access.
View Account User Groups Page
Go to Settings > Access control > Account user groups to display all account user groups. You can view the Name, Description, Role, and Number of users on this page.
Click on each user group to display detailed privileges to which the user group has access.
View Users Page
Go to Settings > Access control > Users to display all users within your organization. You can view Name, Type, Org access, Last login, and State on this page. The Last login column displays the updated timestamp when you log in. If you have not logged in before, the Last login column displays -- instead of a timestamp.
Click on each user to display details of the user, including email address, company, user group, and scope to which they have access.
Use controls to add, enable, or disable individual users. To edit or delete a user, click the Ellipsis (...) icon and select Edit or Delete.
note
You cannot edit a user's email address or company.
Actions for the user list include the following:
- Refresh data.
- Download the user list as a CSV.
- Select which columns to display in the list.
- Filter by the user type or user group.
- Search for specific users.
Add Users
Click + Add new to add a user. For detailed information about adding team members, see Access Control at Organization Level.
Access Control at Account Level
View Roles Page
Go to Settings > Access control > Roles to display the account roles. You can view the Name, Description, and User group on this page.
Click on each role to display detailed privileges to which the role has access.
Actions for the role list include the following:
- Refresh data.
- Download the role list as a CSV.
- Select which columns to display in the list.
- Search for specific roles.
View User Groups Page
Go to Settings > Access control > User groups to display all account user groups. You can view the Name, Description, Role, and Number of users on this page.
Click on each user group to display all users of this group within this Lacework account. From the list, you can view the Name, Type, and Email/Unique ID.
Actions for the user group list include the following:
- Refresh data.
- Download the user group list as a CSV.
- Select which columns to display in the list.
- Search for specific user groups.
View Users Page
Go to Settings > Access control > Users to display all users within this Lacework account. You can view Name, Type, Email/Unique ID, Last login, and State on this page. The Last login column displays the updated timestamp when you log in. If you have not logged in before, the Last login column displays -- instead of a timestamp.
Click on each user to display details of the user. For Standard users, the user details include name, type, email address, company, user group, and the last activity time. For Service users, the user details include name, type, unique ID, description, user group, the last activity time, and the access key id.
Use controls to add, enable, or disable individual users. To edit or delete a user, click the Ellipsis (...) icon and select Edit or Delete.
note
You cannot edit a user's email address, company, or unique ID.
Actions for the user list include the following:
- Refresh data.
- Download the user list as a CSV.
- Select which columns to display in the list.
- Filter by the user type or user group.
- Search for specific users.
Add Users
Click + Add new to add a user. For detailed information about adding team members, see Access Control at Account Level.