This page will cover the various options for user management This page will cover the various user management options and the authentication and security methods available for accessing ConnectSecure.
| Note |
|---|
Please Note: SMS Gateway is not available. |
...
| Tip |
|---|
All data is stored in Postgres with row-level security, and the managed database is encrypted at rest. Sensitive information is encrypted at the application level using AES 256 Ferner encryption. |
| Info |
|---|
Once a password is entered and saved, the next time you view/edit that option, the password will display blank by design. |
...
| Table of Contents | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
...
Add New User
...
Navigate to Global > Settings > Users and tap the Add button.
...
Complete the required fields, which include the First Name, Last Name, Email, Phone Number, and Role.
| Note |
|---|
If you select the new user's Role as ADMIN, that user will have full access to ALL companies. If you need to restrict a user's access to companies, you must select any role aside from ADMIN to see the Company Level access options. |
| Info |
|---|
If you do not see the Company Level Access options, please check the selected role, which is not ADMIN. |
...
Configure Company Level Access
When selecting a ROLE, you can configure the Company Level Access for that Role.
...
You can use the three-dot action menu on the far right to Edit a User, Reset MFA, Delete a user, or access an API Key.
...
Once the password requirements are met, you will see the green checkmarks , and the Next button will illuminatebe illuminated.
...
The User Activated -activated confirmation page appearswill appear, and the user can click the Next button.
...
Enter your Login Name (the email address used for signup) and password.
New User 2-Factor Setup
| Info |
|---|
You need only need to set up one of the following methods, but you can configure multiple options if you choose to do so. |
Tap your choice and then the Next button for setup. Below are instructions for the two options.
Authenticator App Method
Select the Authenticator App option, then tap next.
...
Use your smartphone with your authenticator app (Google Auth, Microsoft Auth, Authy, Duo, etc...…), scan the QR code, OR or copy the Secret and enter this it manually into your app to get your Code to join.
...
Upon entering the Code and tapping next, you should see the 2-factor verified screen to confirm your setup, and tap the Next button to proceed.
...
You will be redirected to the authentication front-end Zitadel (authprod.myconnectsecure.com), where you will see your newly created user account details and options for password and Security, Identity Providers, Authorizations, Memberships, and Metadata.
...
Tap on the Password and Security section on the left panel to view your 2-factor setup and options to configure additional authentication.
...
This completes your setup. You can now visit the ConnectSecure portal and log in at https://portal.myconnectsecure.com. You must provide the tenant 2-factor verified screen to confirm your setup. Tap the Next button to proceed.
...
You’s name based on your company.
...
Device Dependent Method
Select the Device dependent option, then tap Next.
...
| Note |
|---|
Please Note: SMS Gateway is not yet configured so the SMS options will not work at the moment; we are planning to update this option in Q2. |
...
Reset Password / MFA
This section will review how to use the password and MFA reset options and methods.
Ask Your Admin
If you have another user at your company with Admin permissions, you can ask them for assistance if you need to use the RESET MFA option.
Navigate to Global > User Management and use the three-dot action menu next to the user's name.
...
-dot action menu next to the user's name.
...
Once Reset MFA is initiated, The user can navigate to the login screen, enter their password, and they will then be prompted to set up their MFA
...
Self-Service Using Reset Password Link
From the login link (https://authprod.myconnectsecure.com/ui/login/loginname ), tap the Reset Password link.
...
Upon successful login, you will land on the Zitadel authentication front end; navigate to your portal login screen here: https://portal.myconnectsecure.com to access the application.
...
Supported Password and Security
ConnectSecure has several methods available for authentication, which are found in the Zitadel portal; log in by visiting https://authprod.myconnectsecure.com, tap the Profile icon under the User icon, or from the sidebar using the Profile icon (must be at Global > Overview to access)
...
Local password
Passwordless Authentication
Multifactor Authentication
...
Passwordless Authentication
Tap the Add method option to add a new Passwordless method.
...
Give the authenticator a name and tap Send Registration Link (1) or Generate QR Code (2).
...
Multifactor Authentication
Tap the Add Factor option to add a new multifactor method.
...
| Info |
|---|
NOTE: To use your phone with SMS, you must verify your phone number first. See below for help. |
...
Assigning Security Roles to Users
| Panel | ||||||||
|---|---|---|---|---|---|---|---|---|
| ||||||||
What are Security Roles? Roles are used to assign application permissions and company-level access rights. |
...
Select a Role and tap Update to save any changes.
...
Default Roles and Security Matrix
...
| Info |
|---|
NOTE: The role ‘approver’ is used for approval of suppression on vulnerabilities; so this refers to the approval of suppression |
ConnectSecure offers the following predefined roles with access to the data listed in the table below.:
Role | Overview | Assets | Vulnerabilities | Compliance | Active Directory | PII | Read | Write |
|---|---|---|---|---|---|---|---|---|
ADMIN | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
ACTIVEDIRECTORYVIEWER | Yes | No | No | No | Yes | No | Yes | No |
ACTIVEDIRECTORYWRITER | Yes | No | No | No | Yes | No | Yes | Yes |
APPROVER |
No | No | No | No | No | No | Yes | No | |
ASSETVIEWER | Yes | Yes | No | No | No | No | Yes | No |
ASSETWRITER | Yes | Yes | No | No | No | No | Yes | Yes |
COMPLIANCEVIEWER | Yes | No | No | Yes | No | No | Yes | No |
COMPLIANCEWRITER | Yes | No | No | Yes | No | No | Yes | Yes |
PIIVIEWER | Yes | No | No | No | No | Yes | Yes | No |
PIIWRITER | Yes | No | No | No | No | Yes | Yes | Yes |
VULNERABILITYVIEWER | Yes | No | Yes | No | No | No | Yes | No |
VULNERABILITYWRITER | Yes | No | Yes | No | No | No | Yes | Yes |
| Infonote |
|---|
In the previous version of ConnectSecure, we had a role called 'ITADMIN,' which is no longer found but we are working on getting this added to in V4. To grant ITADMIN access similarly in V4, you should assign the following roles:
|
To use RMM integrations and allow company mapping access, the user is only required to have the ‘assetwriter’ role assigned
| Info |
|---|
...
Company Level Allow/Deny Access Options
You can restrict a user to a specific company or set of companies based on the Security Role assigned.Select any role, except for Admin, to see those options.
Allowed Companies
...
Denied Companies
Choose the Denied Companies radio option, then select from the Choose Company drop-down.
...
API Key
You can obtain an API Key from the Member by navigating to Global > Overview/Dashboard > Users >User Management > tap the three-dot Action menu > API Key.
...
This will display your Client ID and Client Secret values.
...
Need Support?
Contact our support team by sending an email to support@connectsecure.com or by visiting our Partner Portal, where you can create, view, and manage your tickets.
...