User Management

User Management is used for high-level authentication and user’s roles. Only ROLE_SYS_ADMIN has rights to view, edit, and create in User Management. The users created from portal are NATIVE user type and the users from LDAP and external auth are EXTERNAL user type.

Role Name	Permission Granted
ROLE_SYSADMIN	All permissions.
ROLE_ADMIN	All permissions except User Management module.
ROLE_DISCOVERY_ALL	All permissions to Discovery module.
ROLE_DISCOVERY_READ	Read-only permission to Discovery module.
ROLE_DISCOVERY_STEWARDS	All permissions to Discovery module except Delete functionality.
ROLE_DISCOVERY_GOVERNANCE	Read-only permission to Discovery module.
ROLE_DISCOVERY_SERVICE	All permissions to Discovery module except Delete functionality.. The role is assigned to privacera_service_discovery user only, and it can not be assigned to another user.
ROLE_MONITORING_ALL	All permissions related to Monitoring.
ROLE_MONITORING_READ	Read-only permission to Monitoring.
ROLE_ANONYMOUS	No permission granted.
ROLE_USER	No permission granted.
ROLE_DISCOVERY_READ_RESTRICTED	Read-only permission to Discovery module along with hiding sample values of classifications.
ROLE_ENCRYPTION_ALL	All permissions to Encryption module.
ROLE_ENCRYPTION_READ	Read-only permissions to Encryption module.
ROLE_DATASERVER_ADMIN	All permissions to Cloud module.
ROLE_CLOUD_ADMIN	All permissions to Cloud module.
ROLE_EXPLORER_ALL	This role will provide all required permission for File Explorer.
ROLE_EXPLORER_METADATA	This role will have METADATA (Listing) permission for File Explorer.
ROLE_EXPLORER_READ	This role will have READ permission for File Explorer.
ROLE_EXPLORER_WRITE	This role will have WRITE permission for File Explorer.
ROLE_EXPLORER_DELETE	This role will have DELETE permission for File Explorer.
ROLE_READ_ONLY	This role will have READ ONLY permission for Privacera Portal.

Example: If a user is allowed read-only access to Monitoring and Discovery modules, then ROLE_SYS_ADMIN can assign role of ROLE_D ISCOVERY_READ and ROLE_MONITORING_READ to that particular user.

LDAP Role Mapping

LDAP role mapping is required to map LDAP roles with the existing Privacera roles. You can associate LDAP users roles to Privacera roles using this LDAP role mapping feature.

By default LDAP role mapping feature is disabled, you need to enable it by adding auth.ldap.enabled=true in Custom Properties section. The following are steps to enable LDAP role mapping feature:

On the Privacera home page, expand the Settings menu and click on System Configurations from left menu.
Select the Custom Properties.
Click the Add Property.
Enter the Key as auth.ldap.enabled.
Enter the Value as true.
Click Add.

Assign a Role to an LDAP User.

On the Privacera home page, expand the Settings menu and click on Ldap Role Mapping from left menu.
On the LDAP Role Mapping page, enter the LDAP Group/Role name next to the Privacera role you want to map it to.
Click Save.

Add Users

On the Privacera home page, expand the Settings menu and click on User Management from left menu.
Click +Add.
In the Add User dialog, enter the following details:
- First Name (Mandatory)
- Last Name
- Email Id
- User Name (Mandatory)
- Select Role (Mandatory)
- New Password
- Confirm Password.
Note
Email ID of a user must be unique. No two users can share the same email ID, because the email ID of the second user will appear blank.
Click Save.

Edit/Delete User

On the Privacera home page, expand the Settings menu and click on User Management from left menu.
Click Edit (pencil icon) for the user.
Edit the user details.
Note: You are not allowed to change the Username once it is created. Hence, Username field is not editable.
Click Save.
To delete a user, click the Delete icon next to the user name.

Edit User Profiles

On the Privacera home page, click on Username and then click on Profile on top-right.
Edit the profile properties.Profile pop-up displays.
Change the password.
1. Click Edit next to the Old Password.
2. Enter the old password.
3. Enter the new password and confirm it.

Privacera Platform

Table of ContentsTable of Contents