newuser (nu)

Description

Create a new AppScan® Source user (a valid user name, password, and full name are required). AppScan® Source users can exist in the AppScan® Enterprise Server user repository and in the AppScan® Source database - or, if you have cause to have users that cannot access the server, they can be created locally as AppScan® Source users. You can also create a new AppScan® Source user that already exists on the AppScan® Enterprise Server.

Syntax

newuser --userid|-u <user id>
--password|-p <password>
--fullname|-f <user first and last name>
[--group [group[:permission[;permission...]
	[--group...]]

Identifying Information

• --userid|-u: Required. User ID. No spaces are allowed.
• --password|-p: User password.
• --fullname|-f: Full name of the user. If the entry includes spaces, enclose it with " symbols (for example, -f "Joe Smith").

Groups and Permissions

Optional. Groups and permissions identify the allowable AppScan® Source tasks for that user. Tasks not specifically identified as part of a permission are available to all users:

--group: The groups and group permissions for this user. Specifying a group without any permissions grants the user all permissions within that group. The groups and their permissions are:

• ASSESSMENTS: Assessment level permissions.
  • ASMNTDELETE: Delete published assessments.
  • ASMNTPUBLISH: Publish assessments.
  • ASMNTSAVE: Save assessments.
  • ASMNTVIEWPUBLISH: View published assessments.
• ADMIN: Administrative permissions.
  • ASE: Manage AppScan® Enterprise settings
  • USER: Manage user settings including adding and deleting users and changing user permissions.
• APPS: Application and Project level permissions
  • ATTRAPPLY: Apply attributes to applications.
  • ATTRMODIFY: Create, delete, and modify attributes.
  • VIEWREGISTER: View registered applications and projects.
  • REGISTER: Register/unregister applications and projects. Implies VIEWREGISTER permission.
  • SCAN: Scan applications and projects.
• KB: Knowledgebase management permissions.
  • CUSTOM: Manage custom rules.
  • PATTERN: Create, edit, or delete patterns.
• FILTER: Filter management
  • SHAREDFILTERS: Manage shared filters.
• SCANCONFIG: Scan configuration management
  • SHAREDCONFIGS: Manage shared scan configurations.

LDAP authentication

You cannot add LDAP users to the AppScan® Source user repository if they are not already in the AppScan® Enterprise Server user repository. To add an AppScan® Source user that will be authenticated via LDAP, you must have configured the AppScan® Enterprise Server user repository to use an LDAP repository. For information about this, see the AppScan® Enterprise Server Planning & Installation Guide.

If you are using LDAP authentication and want to add an AppScan® Source user that is not part of an LDAP user group, issue the newuser command.

Example

Create a user named Joan Darcy on the AppScan® Enterprise Server. Her user name is joandarcy and her password is 123456. Joan can use AppScan® Source with all permissions in the APPS and ASSESSMENTS groups, as well as custom rules permission within the KB group:

AllApplications>> newuser --userid joandarcy --password 123456 
--fullname "Joan Darcy" --group APPS --group ASSESSMENTS --group KB:CUSTOM
AllApplications>> Created user 'joandarcy'. User ID: 888