User accounts and permissions
Before AppScan® Source users can begin to scan or triage results, an administrator must create user accounts and assign permissions to the accounts.
AppScan Source user permissions are stored in the AppScan Source Database and applied when a user is logged in to the AppScan Enterprise Server. Users that run AppScan Source for Development in local mode have full AppScan Source permissions.
When you create a user, you establish a role for that user and identify the permissions available for that user. Permissions identify the allowable AppScan Source tasks for that user. Tasks not specifically identified as part of a permission are available to all users.
| Permission Group | Permission |
|---|---|
| Application and Project Management | Register (Register and unregister applications and projects) |
| Scan | |
| View Registered | |
| Manage Attributes | |
| Apply Attributes | |
| Assessment Management | Delete Published Assessments |
| Save Assessments | |
| Publish Assessments | |
| View Published Assessments | |
| Knowledgebase Management | Manage Custom Rules |
| Manage Patterns | |
| Administration | Manage Users |
| Manage AppScan Enterprise Settings | |
| Filter Management | Manage Shared Filters |
| Scan Configurations | Manage Shared Configurations (sharing scan configurations and editing/deleting shared scan configurations) |