Who Has Access

There are a number of places in Axonius where you assign access privileges. When creating queries, dashboards, asset graphs, activity log queries, dashboard charts, cases, saved views, and enforcement actions. You assign access privileges that restrict in which data scopes these items are available and which users and roles have what level of access.

When creating or editing these items, the dialog box or drawer page has a section named Who has access where access permissions are configured. The steps below describe how to use these options.

If you came to this page from another procedure, when you are finished configuring Who Has Access, go back to that page.

1. In the Who has access section, under General access, select one of the following:

   • Private - The item will only be available to you within the data scope it is created. When Private is selected, “Manage permissions” is not available.
   • Public - The item will be available to the selected roles and users within the data scope it is created.
   • Shared - The item will be available to the selected roles and users in all data scopes.

2. Under Manage permissions, select the users and roles who will have access and then select their access types. You can select a combination of users and roles. Admins and the query creator always have Editor access.

   1. From the list, select one or more users/roles. The list shows the first 5 users and the first 5 roles. To find those not shown, start typing in the search field. Select All to give the selected access to all users and roles.
   2. Select an access type to apply to the selected users/roles:
      • Role Access - The selected users and roles are granted access according to the permissions configured for each role. You can select a mixture of roles and users.
      • No Access - The selected users and roles will have no access.
      • Viewers - The selected users and roles only have permission to view, regardless of the permissions configured for each role.
      • Editors - The selected users and roles have permission to view and edit, regardless of the permissions configured for each role.

📘

Note

See Managing Roles for more information about assigning permissions to roles at the system level.

3. Click Add to assign the select permissions to the selected users and roles. You can change the access for each individual role or user after adding them from the list by selecting the access level from the list to the right of the role or user name.

   Repeat these steps to give different users and roles the appropriate access permissions. For example, select all the individual users and roles that you want to have 'System Access' and click Add. They are added to the list of allowed users and roles. Then, if you want other users and roles to have a different level of access, select them and then their access level and click Add. They are also added to the list of allowed users and roles. Do this for each access level you want to assign.

   

4. Continue with the procedure you were working on.