User accounts and permissions
Before AppScan® Source users can begin to scan or triage results, an administrator must create user accounts and assign permissions to the accounts.
AppScan® Source user permissions are stored in the AppScan® Source Database and applied when a user is logged in to the AppScan® Enterprise Server. Users that run AppScan® Source for Development in local mode have full AppScan® Source permissions.
When you create a user, you establish a role for that user and identify the permissions available for that user. Permissions identify the allowable AppScan® Source tasks for that user. Tasks not specifically identified as part of a permission are available to all users.
| Permission Group | Permission |
|---|---|
| Application and Project Management | Register (Register and unregister applications and projects) |
| Scan | |
| View Registered | |
| Manage Attributes | |
| Apply Attributes | |
| Assessment Management | Delete Published Assessments |
| Save Assessments | |
| Publish Assessments | |
| View Published Assessments | |
| Knowledgebase Management | Manage Custom Rules |
| Manage Patterns | |
| Administration | Manage Users |
| Manage AppScan® Enterprise Settings | |
| Filter Management | Manage Shared Filters |
| Scan Configurations | Manage Shared Configurations (sharing scan configurations and editing/deleting shared scan configurations) |