> For the complete documentation index, see [llms.txt](https://cybrhawksoc.gitbook.io/cybrhawk-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cybrhawksoc.gitbook.io/cybrhawk-docs/platform-management/user-management.md).

# User Management

## 1. Adding & Editing Users

To add or edit users, log in to the customer portal and navigate to "My Tenants," then click on "Users" as below:

<figure><img src="/files/hp4qG3mIi1wBubkxSV1u" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
Note: You will need to be an Admin within your MSP or Tenant, or have the 'IAM Admin' permission assigned to your user, to be able to see and manage other users.
{% endhint %}

To add a new user, click the "ADD" button in the upper right-hand corner, as highlighted below:

<figure><img src="/files/D3CMZuQwzBtRtLeD6OUU" alt=""><figcaption></figcaption></figure>

After clicking "ADD," you'll be able to enter the required fields to create a user:

<figure><img src="/files/8qxJqKiJajhIXXkHShcq" alt="" width="354"><figcaption></figcaption></figure>

To edit a user, click on the edit icon circled in the image below:

<figure><img src="/files/QIluI6SxLL0c6AciDJW0" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
See below for explanations on Demo Data, Admin & User Types.
{% endhint %}

***

## 2. User Roles & Permissions

#### Enabled

The "Enabled" toggle switch controls the state of the user's account.

#### Demo Data

The "Enable Demo Data" toggle will allow users access to a demo tenancy called "acme", which contains sanitised data that can be visualised in our console dashboards.

#### Access Level

**Admin:**\
Admins have full access to the MSP/Tenancy (depending on the “User Type” described below)

**SOC:**\
SOC users have access focused on monitoring, incident response, and security-related functions within the environment.

**Analyst:**\
Analysts have access tailored to investigation, triage, and reviewing alerts or logs relevant to security operations.

**Custom:**\
If required for your use case, users can be given access to only specific areas by assigning the following permissions.

#### User Permissions

<table><thead><tr><th width="197.9453125"></th><th>Admin</th><th>SOC</th><th>Analyst</th></tr></thead><tbody><tr><td>App</td><td>Read Write Delete</td><td>Read Write Delete</td><td>Read Write Delete</td></tr><tr><td><p>Alert Center</p><p>(Alert Listing / Triage / Esc)</p></td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓ ✓ ✓</strong></td></tr><tr><td>Portal Report Summaries</td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓ ✓ ✓</strong></td></tr><tr><td><p>ConfigDB</p><p>(Report Scheduling / Notifications)</p></td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓</strong></td><td><strong>✓</strong></td></tr><tr><td>Console / Data Access</td><td><strong>✓</strong></td><td><strong>✓</strong></td><td><strong>✓</strong></td></tr><tr><td>Integration Onboarding / Management</td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓</strong></td><td><strong>✓</strong></td></tr><tr><td>User Isolation</td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓</strong></td></tr><tr><td>NDR</td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓</strong></td><td><strong>✓</strong></td></tr><tr><td>IAM / User and Tenant Management</td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓</strong></td><td><strong>✓</strong></td></tr><tr><td>Endpoint Isolation</td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓ ✓ ✓</strong></td><td><strong>✓</strong></td></tr></tbody></table>

#### User Type

MSP User: An MSP User will have access to all tenants under the MSP, so if your MSP has 3 tenants, an MSP user will be able to access data from all 3 tenants based on their assigned permissions.

Tenant User: A tenant user will only be able to access and manage data for tenants that are explicitly defined against their user. So if an MSP has tenants, X, Y & Z, and the said user is only defined with access to tenant X, they will not be able to see or manage data from tenants Y & Z

## 3. Resetting Passwords & MFA

To reset a user's password or MFA, click on the edit icon for their user and select the relevant option from the "Reset Options."

<figure><img src="/files/wOsTz7zTBywrZTANsRBP" alt=""><figcaption></figcaption></figure>

***

## Having Trouble?

If you're having any issues with user management, please open a request via the support portal or email [**CybrHawk Support**](mailto:socv2@cybrhawk.com)**,** and our team will assist you.