Roles
| Role | Modules by default |
|---|---|
| Admin | Everything, including users, organizations, integrations, AI and system settings. |
| Lead | Alerts, logs, cases, response, detections and administration. |
| Analyst | Alerts, logs, cases, response and detections. |
| Viewer | Alerts and logs, read-only. |
Admins can change which modules each role reaches in the Roles & privileges matrix under Settings › Team & roles. Roles are enforced on the server for every request.
Grants
Each account is granted specific organizations or all. Grants apply to every module. An admin always sees everything.
Creating accounts
Settings › Team & roles, under Console accounts. Enter the email, name, role, organizations (empty means all) and an initial password of at least ten characters. With single sign-on configured, the person signs in with Fluence Account instead, and the console account must exist first. See Single sign-on.
Removing access
Disable the account; its sessions end on their next request. History attributed to the account is kept. Reassign owned cases before disabling.
Multi-factor authentication
For multi-factor authentication on console accounts, use single sign-on through Fluence Account, which applies the identity provider's controls. Keep the bootstrap administrator account for recovery. The customer portal requires an authenticator app for every account.