Overview
In the Armor Management Portal (AMP), roles are similar to job titles that you can create and assign to your users. When you create a role, you can populate that role with specific permissions. These permissions determine the type of access a user has in AMP. For example, you can create an Accounting role, and then you can add specific permissions to only give the user access to accounting-related features in AMP, such as the permission to view and edit the Invoices screen.
When you create a new user, you must assign that user account a role.
By default, Armor offers three default roles with specific permissions already enabled:
- Admin
- Technical
- Billing
For your convenience, when you create a new user, you can assign a default role to the new user; however, you cannot edit the permissions within these default roles.
You can also create a new role, and then populate that role with your specified permissions.
Create a role and add permissions
Assign a role to an existing user account
- In the Armor Management Portal (AMP), in the left-side navigation, click Account.
- Click Roles + Permissions.
- Locate and select the desired role.
- Under the name of the role, click Members.
- Click Edit Members.
- Select and drag the desired user to the Chosen column.
- Click the X at the top, right corner.
Update a permission for a role
Remember, when you update the permissions for a role, the users assigned to that role will automatically be able to use the newly added permissions.
- In the Armor Management Portal (AMP), in the left-side navigation, click Account.
- Click Roles + Permissions.
- Locate and select the desired role.
- Select or deselect the desired permissions.
- Click Save Role.
Remove a role for a newly created or existing user
After you create a user account with an assigned role, the new user will receive an email to complete the login process. During this time, the account administrator has limited access to that user account; however, the account administrator can still update roles and permissions for the new user.
- In the Armor Management Portal (AMP), in the left-side navigation, click Account.
- Click Roles + Permissions.
- In the search bar, enter the name of the newly created user, and then hit Enter. The table shows a list of roles associated with that user.
- Locate and select the desired role.
- Under the name of the role, click Members.
- Click Edit Members.
- Select and drag the desired user to the Chosen column.
- Click the X at the top, right corner.
Review available permissions
Review the following table to understand the permissions available for you to add to your Roles.
| Permission | System | Resource | Description | Recommended role | Product compatibility |
|---|---|---|---|---|---|
| Read Network Bandwidth | Network | Network | View network transfer history | Technical | Armor Complete - Secure Hosting |
| Read Firewall | Network | Firewall | View firewall rules | Technical | Armor Complete - Secure Hosting |
| Write Firewall | Network | Firewall | Add and update firewall rules | Technical | Armor Complete - Secure Hosting |
| Read Network IP | Network | IP | View IP address allocations and assignments | Technical | Armor Complete - Secure Hosting |
| Write Network IP | Network | IP | Add, update, and remove IP address assignments | Technical | Armor Complete - Secure Hosting |
| Read Network L2L | Network | L2L | View L2L network tunnels | Technical | Armor Complete - Secure Hosting |
| Write Network L2L | Network | L2L | Add, update, and remove L2L tunnels | Technical | Armor Complete - Secure Hosting |
| Read Network NAT | Network | NAT | View DNAT assignments per virtual machine | Technical | Armor Complete - Secure Hosting |
| Write Network NAT | Network | NAT | Add and remove DNAT assignments | Technical | Armor Complete - Secure Hosting |
| Read SSL VPN Devices and Users | Network | SSL VPN | View SSL VPN users and details | Technical | Armor Complete - Secure Hosting |
| Write SSL VPN Devices and User | Network | SSL VPN | Enable SSL VPN for users | Technical | Armor Complete - Secure Hosting |
| Read Identity | Identity | Accounts | View account information | Technical | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Update Personal Identity | Identity | Identity | Update the challenge phrase and challenge response | Technical | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Write Account | Identity | Accounts | Update account information | Technical | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Update Customer Passwords | Identity | Roles | Update another user's password | Technical | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Write Identity | Identity | Roles | Update account information | Technical | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Read Workload(s) | VPC | APP | View account workloads | Technical | Armor Complete - Secure Hosting |
| Write Workload | VPC | APP | Create, update, and remove account workloads | Technical | Armor Complete - Secure Hosting |
| Read Location(s) | VPC | Location | View locations available for this account | Technical | Armor Complete - Secure Hosting |
| Read Monitoring | VPC | Monitoring | View account resources | Technical | Armor Complete - Secure Hosting |
| Read Virtual Machine Stats | VPC | Stats | View graph data for virtual machines | Technical | Armor Complete - Secure Hosting |
| Read Storage | VPC | Storage | View disk and storage information for the account | Technical | Armor Complete - Secure Hosting |
| Read Template(s) | VPC | Template | View template details | Technical | Armor Complete - Secure Hosting |
| Write Template | VPC | Template | Create, update, and remove account templates | Technical | Armor Complete - Secure Hosting |
| Read Virtual Machine(s) | VPC | VMS | View virtual machine details | Technical | Armor Complete - Secure Hosting |
| Scale Virtual Machine | VPC | VMS | Upgrade or downgrade the size of a virtual machine. | Technical | Armor Complete - Secure Hosting |
| Write Virtual Machine | VPC | VMS | Create, update, and remove account virtual virtual machines | Technical | Armor Complete - Secure Hosting |
| Read Server Replication | VPC | VMS | Technical | ||
| Write Server Replication | VPC | VMS | Technical | ||
| Update Payment Information | Account | Billing | View, create, edit, and delete payment information. | Billing / Accounting | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Read Payment Information | Account | Billing | View payment information. | Billing / Accounting | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Read Connections | Account | Connections | Armor Complete - Secure Hosting Armor Anywhere - Security | ||
| Write Connectors | Account | Connectors | Armor Complete - Secure Hosting Armor Anywhere - Security | ||
| Read Orders | Account | Orders | View account resources | Billing / Accounting | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Write Orders | Account | Orders | Add additional account resources | Billing / Accounting | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Write Secret | Account | Secret | Technical | Armor Complete - Secure Hosting Armor Anywhere - Security | |
| Read Compliance | Compliance | Compliance | View vulnerability scanning product information | Technical | Armor Complete - Secure Hosting |
| Write Compliance | Compliance | Compliance | Update (upgrade, downgrade or delete) vulnerability scanning options | Technical | Armor Complete - Secure Hosting |
| Read AVAM | Core | Connection | View Malware Protection detail | Technical | Armor Anywhere - Security |
| Read Dashboard Statistics | Core | Connection | View the data that populates the security dashboard | Technical | Armor Anywhere - Security |
| Read FIM | Core | Connection | View File Integrity Monitoring details. | Technical | Armor Anywhere - Security |
| View Core License | Core | Licensing | View core license information for your account | Technical | Armor Anywhere - Security |
| Read LogManagement | Core | Logs | View Log Management information | Technical | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Read LogSearch | Core | Logs | View Log Search information | Technical | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Write LogManagement | Core | Logs | Update log management services | Technical | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Read OS Packages | Core | Packages | View OS patching details | Technical | Armor Complete - Secure Hosting Armor Anywhere - Security |
| View Vulnerability Scans | Core | Vulnerability Scanning | View vulnerability scanning report details | Technical | Armor Anywhere - Security |
| View Invoices | Billing | Invoices | View the invoices associated with your account | Billing / Accounting | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Read Product Catalog | Billing | Products | View available products to add to your account | Billing / Accounting Technical | Armor Complete - Secure Hosting Armor Anywhere - Security |
| View Subscription | Billing | Subscriptions | View current subscriptions for your account | Billing / Accounting Technical | Armor Complete - Secure Hosting |
| Write Subscriptions | Billing | Subscriptions | Add subscriptions to your account | Billing / Accounting Technical | Armor Complete - Secure Hosting |
| Read Entity Metadata | Meta | Note | View notes and tags | Technical | Armor Complete - Secure Hosting |
| Write Entity Metadata | Meta | Note | Updates notes and tags | Technical | Armor Complete - Secure Hosting |
| Read Tasks | Meta | Task | View task information | Technical | Armor Complete - Secure Hosting |
| Write Tasks | Meta | Task | Write task information | Technical | Armor Complete - Secure Hosting |
| Read Notification(s) | Notification | Notifications | View account notifications | Billing / Accounting Technical | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Read Ticket(s) | Ticket | Tickets | View open tickets | Billing / Accounting Technical | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Write Ticket(s) | Ticket | Tickets | Create a support ticket | Billing / Accounting Technical | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Global Search | Search | Search | Search throughout AMP for various resource needs | Billing / Accounting Technical | Armor Complete - Secure Hosting Armor Anywhere - Security |
| Read Endpoint(s) | Armor | Securityendpoints | Technical |