User Roles

The platform manages organizational user permissions through a role-based system. This system is designed to secure access to various functionalities within the organisation.

Currently, the platform supports four distinct roles, each tailored to specific responsibilities and access levels:

• Admin: Grants full access to the organisation settings (security settings, full access to audit logs, updating user roles ...).
• User: Grants the ability to manage certain settings without access to potentially destructive or sensitive actions.
• Attack Surface Auditor: Grants users the permission to manage certain asset owners belonging to them, doesn't have writing permission on other pages.
• Reader: Grants read-only permission, does not have the ability to apply any kind of changes to the organisation.