Managing Your DigitSec Users

DigitSec allows you to include as many users in your subscription as you like. There is
no additional cost for everyone on your team to have access. Giving everyone access to
understanding the security posture of your organization's Salesforce security can be very
powerful. It allows Executives and Managers to understand how to prioritize their resources, it
allows Developers to focus on potential vulnerabilities in their code, and it allows Administrators
to lock down critical settings.

DigitSec Users are managed in two different tiers, the Environment Tier and the Workspace
Tier.

To access User Management at the Environment Tier use the top bar navigation to click on "Setup" and then use the sub-tab navigation to choose Users.

Environment Tier

The default roles that exist with DigitSec at the Environment Tier are Admin, Environment
Manager, Environment User, and Environment User-Read Only.

Admin(istrator) users have complete control over the system and have direct access to all Workspaces. Environment Managers can add new Workspaces, but they do not have access to the “Configure” or “Setup” sections which govern global integrations/settings and users, respectively.

Environment Managers, Environment Users, and Environment Users Read-Only are offered mainly as references as they are all restricted in terms of requiring explicit Workspace assignment, cannot manage configurations or settings at the global level. Each of these roles, except for Environment User Read-Only can create new Workspaces to which they will automatically be given access and will be considered as the Owner.

An Environment User Read-Only can only review data to which they are given access, they cannot initiate scans, make changes to workspaces or add comments to findings. They are the only group that cannot create new Workspaces 

Workspace Tier

Once a user has been assigned to an Environment Role, they can be assigned access on a per Workspace basis. Click on the blue + button (diagonal arrow) to create a new access permission. Use the Workspace Selector and the Role Selector buttons to create the access pairing desired. Remember to scroll (horizontal arrow) to the bottom of the modal window and use the blue Submit button to create the assignments.

By default, there are three different user roles: Workspace Manager, Workspace User and
Workspace User Read-Only.

Workspace Managers can add/remove existing Environment Managers, Users or Users Read
Only to/from a Workspace. Workspace Users cannot manage access to a Workspace.

Workspace Users and Managers are able to initiate scans, rename or tag scans, change
severity or finding assignments, and make findings comments.

Environment Users that create a Workspace will be automatically given a Workspace Manager
role.

Custom Roles

You can create custom Roles at either the Environment or Workspace Tier to meet your needs.

Use the “+Add Roles” button on the Users Management screen to bring up the Add Role modal
dialog.

You can enter a custom name within the Role Name input field (horizontal arrow), select a scope of
Environment or Workspace with the Role Type selector, and then add Permissions as needed.
Each Permission Object corresponds to a component of functionality at the corresponding level (diagonal arrow). A permission is either Read or Write (Write permissions are inclusive of Read permissions). See
the following table to see the tier-object relationship.

Once a new Custom Role has been created, it will be available in the appropriate Role Selector
menu in the User Management Detail Modal dialog.