# User Management

## 1. Adding & Editing Users

To add or edit users, log in to the customer portal and navigate to "My Tenants," then click on "Users" as below:

<figure><img src="/files/hp4qG3mIi1wBubkxSV1u" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
Note: You will need to be an Admin within your MSP or Tenant, or have the 'IAM Admin' permission assigned to your user, to be able to see and manage other users.
{% endhint %}

To add a new user, click the "ADD" button in the upper right-hand corner, as highlighted below:

<figure><img src="/files/D3CMZuQwzBtRtLeD6OUU" alt=""><figcaption></figcaption></figure>

After clicking "ADD," you'll be able to enter the required fields to create a user:

<figure><img src="/files/8qxJqKiJajhIXXkHShcq" alt="" width="354"><figcaption></figcaption></figure>

To edit a user, click on the edit icon circled in the image below:

<figure><img src="/files/QIluI6SxLL0c6AciDJW0" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
See below for explanations on Demo Data, Admin & User Types.
{% endhint %}

***

## 2. User Roles & Permissions

#### Enabled

The "Enabled" toggle switch controls the state of the user's account.

#### Demo Data

The "Enable Demo Data" toggle will allow users access to a demo tenancy called "acme", which contains sanitised data that can be visualised in our console dashboards.

#### Access Level

**Admin:**\
Admins have full access to the MSP/Tenancy (depending on the “User Type” described below)

**SOC:**\
SOC users have access focused on monitoring, incident response, and security-related functions within the environment.

**Analyst:**\
Analysts have access tailored to investigation, triage, and reviewing alerts or logs relevant to security operations.

**Custom:**\
If required for your use case, users can be given access to only specific areas by assigning the following permissions.

#### User Permissions

<table><thead><tr><th width="197.9453125"></th><th>Admin</th><th>SOC</th><th>Analyst</th></tr></thead><tbody><tr><td>App</td><td>Read Write Delete</td><td>Read Write Delete</td><td>Read Write Delete</td></tr><tr><td><p>Alert Center</p><p>(Alert Listing / Triage / Esc)</p></td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓ ✓ ✓</strong></td></tr><tr><td>Portal Report Summaries</td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓ ✓ ✓</strong></td></tr><tr><td><p>ConfigDB</p><p>(Report Scheduling / Notifications)</p></td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓</strong></td><td><strong>✓</strong></td></tr><tr><td>Console / Data Access</td><td><strong>✓</strong></td><td><strong>✓</strong></td><td><strong>✓</strong></td></tr><tr><td>Integration Onboarding / Management</td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓</strong></td><td><strong>✓</strong></td></tr><tr><td>User Isolation</td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓</strong></td></tr><tr><td>NDR</td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓</strong></td><td><strong>✓</strong></td></tr><tr><td>IAM / User and Tenant Management</td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓</strong></td><td><strong>✓</strong></td></tr><tr><td>Endpoint Isolation</td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓</strong></td></tr></tbody></table>

#### User Type

MSP User: An MSP User will have access to all tenants under the MSP, so if your MSP has 3 tenants, an MSP user will be able to access data from all 3 tenants based on their assigned permissions.

Tenant User: A tenant user will only be able to access and manage data for tenants that are explicitly defined against their user. So if an MSP has tenants, X, Y & Z, and the said user is only defined with access to tenant X, they will not be able to see or manage data from tenants Y & Z

## 3. Resetting Passwords & MFA

To reset a user's password or MFA, click on the edit icon for their user and select the relevant option from the "Reset Options."

<figure><img src="/files/wOsTz7zTBywrZTANsRBP" alt=""><figcaption></figcaption></figure>

***

## Having Trouble?

If you're having any issues with user management, please open a request via the support portal or email [**CybrHawk Support**](mailto:socv2@cybrhawk.com)**,** and our team will assist you.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://cybrhawksoc.gitbook.io/cybrhawk-docs/platform-management/user-management.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.