Administrator Management

Overview 👀

By creating admin users in SIEM software, secure access control can be provided with granular authorization system. The system offers detailed permission management on module basis, device basis and location basis.

Admin Profile 👨‍💼

Admin profiles are authorization templates to be assigned to users. Each profile contains permissions to access specific modules.

Module Based Authorization ✅

The system provides individual permission control for the following modules: Available Modules:

Core (System): System core functions Integrations: Integration management Data Collector: Data collection operations Data Management: Data management Report: Report generation and display Hotspot: Captive portal management Agent: Agent management Ext. Management: External management operations

Permission Levels:

None: No access Read: Read only authorization Read/Write: Read and write authorization

Quick Profile Templates:

Select All: Select all modules None: Select no modules Custom: Custom configuration Read: Read only for all modules Read/Write: Read/write for all modules Super Admin: Full authorization

Administrator 👨‍💼

Security Features ✨

1. Trusted Host

• Enable/Disable Trusted Host: IP-based access restriction
• Trusted Host IP: Allowed IP addresses (in CIDR format)
• Example: 192.168.1.10/24, 115.121.92.135

Benefits:

• Restricting access from specific IP addresses
• Geographic security control
• Preventing unauthorized access

2. Two Factor Authentication (2FA)

Enable/Disable Two Factor Authentication: Two-factor authentication Authentication Type:

Local: In-system 2FA Google: Google Authenticator integration

Benefits

• Additional layer of security
• Protection in case of password theft
• Meeting compliance requirements