Granular permissions and control according to user roles so that you know who has access to what.
Structure
- Organization: The top-level customer entity (e.g., "FinWiz Corp"). Contains Billing and Settings.
- Account Group: A subdivision of organization (e.g., "AI Datacenter", "EU Branch"). Contains Assets and Scans.
Roles
- Organization Admin: Customer admin who manages their entire organization.
- Account Group Admin: Customer admin who manages a specific subdivision.
- User: Standard customer user with read-only/execute permissions.
| Scoped Role | Permissions |
|---|---|
| Organization Admin | Full control over their organization: users, account groups, agents, scans, results, billing view |
| Account Group Admin | Manage a specific account group: agents, scans, results, user assignment |
| User | Read-only: view dashboard, generate reports, read results |
Permission Matrix
| Permission Category | Org Admin | Group Admin | User |
|---|---|---|---|
| Create Agent | ✓ | ✓ | - |
| Create Scan | ✓ | ✓ | - |
| View Dashboard | ✓ | ✓ | ✓ |
| Manage Dashboard | ✓ | ✓ | - |
| Generate Report | ✓ | ✓ | ✓ |
| View Audit Logs | ✓ | ✓ | - |
| Manage Registration Token | ✓ | ✓ | - |
| Manage Users | ✓ | - | - |
| Manage Org | ✓ | - | - |
| Manage Groups | ✓ | ✓ | - |
| Manage Agents | ✓ | ✓ | - |
| Manage Scans | ✓ | ✓ | - |
| Read Results | ✓ | ✓ | ✓ |
| Billing | ✓ (view) | - | - |
| Impersonate User | - | - | - |