Permissions - Users

User permissions required to manage Qualys users (add, edit, view) are below.

User role	Permissions
Manager	Add and edit all user accounts in the subscription. View all user accounts in subscription, including full user details.
Administrator	Add and edit user accounts except Manager and Administrator user. View all user accounts in subscription, including full user details.
Unit Manager	Add and edit user accounts to API user’s same business unit. View user accounts for users in their business unit, including full user details. See Sub-User Permissions.
Scanner, Reader, Auditor	View user accounts for users in their business unit, including full user details. See Sub-User Permissions.

Sub-User Permissions (Reader/ Unit Manager/ Scanner/ Auditor)

If the Restrict view of user information for users outside of business unit flag is disabled, the sub-users (Reader/ Unit Manager/ Scanner/ Auditor) can view only partial user account details for users outside of their business unit, though the list will be populated with all users.

If the Restrict view of user information for users outside of business unit flag is enabled, the sub-users (Reader/ Unit Manager/ Scanner/ Auditor) are restricted from accessing user information outside their business unit.

Listing Users and Last Login Date

When a list users API request is made by a Manager or Unit Manager, the last login date for each user is provided in the XML results. This is the most recent date and time the user logged into the service. For a Manager, the last login date appears for all users in the subscription. For a Unit Manager, the last login date appears for all users in the Unit Manager’s same business unit.