User management - Oleria Identity Security

Manage the people who have access to your Oleria workspace. From this section you can add new users, assign roles that control what each person can see and do, and remove access when someone leaves.

User attributes

Each user account contains the following fields:

Field	Description
Name	Full name of the user. Retrieved from your organization’s authentication source when the user first logs in. May be blank if the user has not yet logged in or if the authentication source does not include a name.
Email address	Email address used to add the user. This is the address the user needs to log in via your organization’s authentication source.
Status	Current access state. Active - the user has access to the workspace based on their assigned role.
Roles	Roles assigned to the user that define their permissions in the Oleria workspace.

Roles

Oleria uses roles to group permissions and control what each user can see and do in the workspace. The following built-in roles can be assigned to users. These default roles cannot be edited.

Default role	Description
Administrator	Full access to all features and settings.
Operator	Access to Adaptive Security (except remediations) and can manage connected integrations.
Analyst	View-only access to Adaptive Security.
Governance Operator	Access to all Governance features, including access bundles. Can view connected integrations but not modify them.
Identity Lifecycle Operator	Access to identity lifecycle, access bundles, and access requests. Cannot run access reviews. Can view connected integrations but not modify them.

Permissions by role

Each role includes a specific set of permissions across modules:

Module	Administrator	Operator	Analyst	Governance Operator	Identity Lifecycle Operator
Manage Users	View all users, Add a user, Update user, Remove user	No access	No access	No access	No access
Access Reviews	Manage access reviews	View	View	Manage access reviews	No access
Identity Lifecycle, Access Bundles & Access Requests	Manage identity lifecycle, access bundles, and access requests	View	View	Manage identity lifecycle, access bundles, and access requests	Manage identity lifecycle, access bundles, and access requests
Integrations	View all integrations, Add integration, Delete integration	View all integrations, Add integration, Delete integration	View all integrations	View all integrations	View all integrations
Ticketing	Create Ticket, View Ticket, Add/View/Delete Ticket Management System	Create Ticket, View Ticket, Add/View/Delete Ticket Management System	Create Ticket, View Ticket	Create Ticket, View Ticket	Create Ticket, View Ticket
Remediation	Disable Account, Revoke Access	No access	No access	No access	No access
Action Center	View, Undo Action	View	View	View	View
Access Graph	View	View	View	View	View
Risk Monitoring	View, Export CSV from Risk Detail	View, Export CSV from Risk Detail	View, Export CSV from Risk Detail	View, Export CSV from Risk Detail	View, Export CSV from Risk Detail
Activity Analysis	View, Export CSV	View, Export CSV	View, Export CSV	View, Export CSV	View, Export CSV
Account Utilization	View, Export CSV, Disable Account	View, Export CSV	View, Export CSV	View, Export CSV	View, Export CSV
Group Utilization	View, Export CSV	View, Export CSV	View, Export CSV	View, Export CSV	View, Export CSV
Access Inventory	View, Export CSV, Revoke Access	View, Export CSV	View, Export CSV	View, Export CSV	View, Export CSV
Notifications	View	View	View	View	View

Topics in this section

Manage users

Add new users, update roles, and remove users from your workspace.

Default user roles

Understand the built-in roles and the permissions each one grants.

Update a user's role

Change the role assigned to an existing user.

Remove a user

Remove a user’s access to the Oleria workspace.

User attributes

Reference for the fields stored on each user account.

Contact us

For questions, contact us at support@oleria.com.

​User attributes

​Roles

​Permissions by role

​Topics in this section

Manage users

Default user roles

Update a user's role

Remove a user

User attributes

​Contact us

User attributes

Roles

Permissions by role

Topics in this section

Contact us