User Roles and Permissions for Mitigation

Mitigation application has three out-of-the-box (OOTB) roles for MTG users:

  • Mitigation Manager: This role has all the permissions for the Mitigation (MTG) application.
  • Mitigation User: This role is created for the operators of the Mitigation job, who interact with and manage mitigation activities.
  • Mitigation Reader: This role is granted to users with viewing/read-only capabilities, developed to provide insight into the Mitigation operations. This role has only view permissions on mitigation jobs and dashboards.
  • Mitigation Dashboard Author: This is a special role that is needed only for larger organizations that delegate development of dashboards to a dedicated team, especially one that does NOT operate/manage the mitigation jobs. This role includes all the Mitigation Reader permissions.
  • Custom Access Manager: This role grants access to the License tab and permits the user to add a co-author to the deployment job.

View MTG Roles and Permissions

On the Role Management tab, create a role and view the role and related permissions. For more information, see Creating a Role and Managing Roles and Permissions. 

Assigning tags and asset groups to a user

You can assign the required tags and asset groups to the users. For more information, see Managing Users. 

User Roles Comparison

The MTG application has several permissions that are assigned to the user roles. The following table compares these permissions granted to the default user roles for MTG:

Permissions Description                            Default Roles  
MTG Manager MTG User MTG Reader Custom Access Manager
MTG Permissions MTG UI Access: Allows the sub-user to view the MTG UI.
 
✔      
MTG API Access: Allows the sub-user to access the MTG API. ✔      
MTG Deployment Job Permissions Create Mitigation Job: Allows the sub-user to create mitigation jobs. ✔      
  View Any Mitigation Job: Allows the sub-user to view any mitigation job. ✔      
  View Assigned Mitigation Job: Allows the sub-users to view only their assigned jobs. ✔ ✔ ✔  
  Edit Any Mitigation Job: Allows the sub-user to edit any job  ✔      
  Edit Assigned Mitigation Job: Allows the sub-user to edit only their assigned mitigation jobs. ✔      
  Enable/Disable any Mitigation Job: Allows the sub-user to enable and disable any mitigation job. ✔      
  Enable/Disable Assigned Mitigation Job: Allows the sub-user to enable and disable only their assigned mitigation jobs.  ✔      
  Delete Any Mitigation Job: Allows users to delete any mitigation jobs.  ✔      
  Delete Assigned Mitigation Job: Allows the sub-user to delete only their assigned mitigation jobs. ✔      
  Change Mitigation Job Owner: Allows the sub-user to change the job owner of the mitigation job.  ✔      
ELM Global Custom Feature Access Permissions Allow License Tab Access       ✔
  Allow access to add Deployment Job Co-author       ✔