Home
Administration
Define users, applications, policies, and configure DevOps integrations.
Users
User management helps you restrict access to sensitive apps by assigning them to asset groups and then adding specific users to those groups.

Administration
Define users, applications, policies, and configure DevOps integrations.
- Users
  User management helps you restrict access to sensitive apps by assigning them to asset groups and then adding specific users to those groups.
  - Managing users
    Examine your users and decide who needs access to which apps and asset groups. Consider grouping them by business unit or geography. By default, all users who are not designated as administrators in Cloud Marketplace are application testers. Decide which users need to be only report viewers and change their role.
  - User roles
    Users are assigned to asset groups by an administrator. Predefined user roles cannot be deleted.
  - Asset groups
    Asset groups represent abstract components of your organization, like "finance" or "engineering". Administrators can restrict access to specific applications by assigning them to an asset group and limiting the users who belong in the group.
- Applications
  An application is a collection of scans related to the same project. It can be a web site, a desktop app, a mobile app, a web service, or any component of an app. Applications enable you to asses risk, identify trends, and make sure that your project is compliant with industry and organization policies.
- Policies
  You can apply the pre-defined policies - as well as your own custom policies - to show only data for the issues that are relevant for you.
- DevOps
  Tools for incorporating ASoC in your SDLC.
- Personal scans
  A personal scan is a way of evaluating the relative security of an application in development without affecting overall application scan data, or compliance.
- Scan status
- Audit trail
  The audit trail (Organization > Audit trail) logs user activity.

Users

User management helps you restrict access to sensitive apps by assigning them to asset groups and then adding specific users to those groups.

All your existing apps and users initially belong to the default asset group. Your administrator can move the apps into new asset groups and assign users to them.