: Add Data Security Administrators
Focus
Focus

Add Data Security Administrators

Table of Contents

Add
Data Security
Administrators

Create additional administrator accounts with specific privileges on
Data Security
.
Initially, to create new administrator accounts for
Data Security
access, log in as the administrator with the Super Admin role, which is the role assigned to the user specified in the order fulfillment email. With the Super Admin role, you can create additional administrator accounts on SaaS Security, assign administrator roles, and create teams.
As an admin of a team, you can create other admin accounts with access to the SaaS applications assigned to your team but only a Super Admin role can create other Super Admin accounts. You don't need to create administrator accounts for end users who use the application to create or share content within each SaaS application.
See About Roles and Permissions Through Common Services if you're using the
Cloud Management Console
.
With SaaS Security:
  • If you add an administrator with an email that
    already exists
    in the Customer Support Portal (CSP), that administrator’s SaaS Security account will be linked to the administrator’s CSP account.
  • If you add an administrator with an email that
    does not exist
    in CSP, then an account will be automatically created for that administrator on
    Data Security
    , as well as an account in CSP tied to your organization.
  1. Select
    Settings
    Admin Accounts
    and
    Add Administrator
    .
  2. Enter the
    Name
    and
    Email
    address of the new administrator.
  3. Choose an
    Authentication Type
    :
    • Single Sign-On (SSO)
      PAN SSO enables you to grant administrator access with seamless authentication using a single set of credentials. This option eliminates the need for application or service-specific passwords. If you enable SSO, you don't have to create administrator accounts on the local database.
    • Local Authentication
      —Local authentication grants access to SaaS Security after administrator successfully presents a password.
    Local authentication is not supported for SaaS Security activated on the hub.
  4. Select the administrative
    Role
    :
    You can select any of the following predefined roles, or you can Add a Custom Admin Role for enabling more granular access to the functional areas of
    Data Security
    .
    • Super Admin
      —A read-write administrator account that allows full functionality within
      Data Security
      , including global account settings, creating administrator accounts, and assigning administrator roles.
    • Admin
      —A read-write administrator account that allows full functionality within
      Data Security
      , including the ability to automatically or manually remediate risks and create additional administrator accounts.
    • Incident Management Admin
      —An administrator account that allows granular access to investigate and remediate incidents only.
    • Limited Admin
      —An administrator account that allows the administrator to assess incidents and remediate risks. This administrator cannot access
      Data Security
      settings or modify policy rules.
    • Read Only
      —An administrator account that allows the administrator to view information collected by
      Data Security
      and generate reports but does not allow the administrator to make changes. For example, this administrator can access incidents, but cannot remediate risks.
    • Custom Role
      —An administrator account with custom permissions to allow specific management tasks that meet your organizational needs.
  5. Select the
    Team
    to assign the administrator to.
    If you have not created any custom teams, assign the administrator to the predefined
    All Apps
    team.
  6. Select the default
    Language
    for the new administrator.
  7. Save
    your changes.
    To verify an administrator’s privileges, use
    Search name or email
    or use the
    Roles
    filter. You can also download a CSV file to view the complete list of all administrative users configured on SaaS Security.

Recommended For You