Page tree

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 19 Next »

This topic only applies to Armor Complete - Secure Hosting account administrators who have not started the upgrade process to Generation 4.

Before you begin, to better understand the upgrade process, Armor recommends that you review the Frequently Asked Questions for Generation 4 documentation.

Overview

24 hours before your scheduled upgrade begins, you will receive an invitation from Armor to complete the account signup process and access the Armor Management Portal (AMP).

Before Armor begins the upgrade process, use this document to complete the recommended pre-upgrade tasks.

Armor recommends that you complete these tasks so that after the upgrade process, you and your users can easily access AMP. 


Step 1: Complete your account signup

Error rendering macro 'excerpt-include'

No link could be created for 'Complete your account signup (snippet)'.

 


Step 2: Confirmed assigned roles

In the Armor Management Portal (AMP), roles are similar to job titles that you can create and assign to your users. You can populate these roles with specific permissions to restrict the type of access your users can have in AMP.

For example, if you have a user who simply needs accounting permissions in AMP, you can create an Accounting role, assign accounting-related permissions to the role, and then assign that role to a specific user. 

To prepare for the upgrade process, Armor has created three default roles (Admin, Technical, and Billing). Additionally, Armor has assigned your users to one of these roles. 

Armor recommends that you review the assigned roles in AMP. 

After the upgrade process, you can edit these roles. 

 Permissions in the Admin role

By default, the Admin role contains every permissions and is automatically assigned to a new administrator account.

 Permissions in the Billing role

By default the Billing role contains the following permissions: 

PermissionDescription

Read Entity Metadata

View notes and tags
Read IdentityView account information
Read WorkloadsView account workloads
Read Payment InformationView payment information

Write Payment Information

Update payment information
Read ComplianceView vulnerability scanning product information
Read AVAMView Malware Protection detail
Read Dashboard StatisticsView the data that populates the security dashboard
Read FIMView File Integrity Monitoring details.
Read Connections
Read FirewallView account firewall rules
Update Personal IdentityUpdate the challenge phrase and challenge response
View InvoicesView the invoices associated with your account
Read Network IPView account IP allocations and assignments
Read Network L2LView L2L network tunnels
View Core LicenseView core license information for your account
Read LocationsView locations available for this account
Read LogManagementView Log Management information
Read LogSearchView Log Search information
Read MonitoringView account resources
Read Network NatView DNAT assignments per VM.
Read Network BandwidthView network transfer history
Write Entity MetadataUpdates notes and tags
Read NotificationsView account notifications
Read OrdersView account resources
Read OS PackagesView OS patching details
Read Product CatalogRead Product Catalog
Global SearchPerform Global Search
Read Endpoints
Read SSL VPN Devices and UsersView SSL VPN account users and details
Read Virtual Machine StatsView graph data for virtual machines
Read StorageView disk and storage information for the account
View SubscriptionsView subscriptions for your account
Read TasksView task information
Read TemplatesView template details
Read TicketsView open tickets in your account
Write TicketsCreate a support ticket
Read Virtual Data CentersView account virtual data center details.
Read Server Replication
Read Virtual MachinesView virtual machine details
View Vulnerability ScansView vulnerability scanning report details
 Permissions in the Technical role

By default the Technical role contains the following permissions: 

  • Read Entity Metadata
  • Read Identity
  • Read Workloads
  • Write Workload
  • Read Compliance
  • Write Compliance
  • Read AVAM
  • Read Dashboard Statistics
  • Read FIM
  • Read Connections
  • Write Connectors
  • Read Firewall
  • Write Firewall
  • Update Personal Identity
  • Read Network IP
  • Write Network IP
  • Read Network L2L
  • Write Network L2L
  • View Core License
  • Read Locations
  • Read LogManagement
  • Read LogSearch
  • Write LogManagement
  • Read Monitoring
  • Read Network Nat
  • Write Network Nat
  • Read Network Bandwidth
  • Write Entity Metadata
  • Read Notifications
  • Read Orders
  • Write Orders
  • Read OS Packages
  • Read Product Catalog
  • Global Search
  • Write Secret
  • Read Endpoints
  • Read SSL VPN Devices and Users
  • Read Virtual Machine Stats
  • Read Storage
  • View Subscriptions
  • Write Subscriptions
  • Read Tasks
  • Write Tasks
  • Read Templates
  • Write Templates
  • Read Tickets
  • Write Tickets
  • Read Virtual Data Centers
  • Read Server Replication
  • Read Virtual Machines
  • Scale Virtual Machine
  • Write Server Replication
  • Write Virtual Machine
  • View Vulnerability Scan
  1. In the Armor Management Portal (AMP), in the left-side navigation, click Account
  2. Click Roles + Permissions
  3. Click Admin
  4. Click Members
  5. Review and confirm the list of assigned users.  
  6. (Optional) To remove a user from this role, click Edit Members
    1. Under Chosen, select and drag the desired user to the Members column.
    2.  Click the X at the top, right corner to save your changes. 
  7. Repeat the above steps for the Billing and Technical roles.