Users and user roles

User-roles in HITGuard

Each user role has its own permissions.
User roles can be given seperately for every modul.
That means a user can be an Expert in the Security Assessor but only an Professional or Practitioner in the Progress Monitor.
User-roles in the Progress Monitor, User-roles in the Security Assessor

Expert:
In this role you will be responsible for one or more management systems in your company. You must plan measures for findings, ensure the sustainability of these measures and are required to report to Management.

• can create and administrate management systems
• can create assessments, risks, measures and controls and can also administrate findings
  (expert mode in the Progress Monitor for processing progress reports)
• is responsible for the administration of the risk policy
• can make access permissions and basic configurations

Professional:

• has access to all tasks in the management system with limited editing rights
• can create assessments, risks, measures and controls and can also administrate findings

Practitioner:
In this role, you have detailed information and implementation skills that are required from within the management system. Sharing your knowledge with HITGuard Experts is essential for a vibrant management system.

• has an overview of all findings, controls and assessments assigned to him for response
• will be reminded to complete his tasks
• is the standard role that each user has over all modules

User Administration

Creating a new user is divided into 3 steps:

1. Create user including initial password:

   There are 2 ways to create a user

   • Option 1: Userlist

   Administration ==> User

   In the userlist click on the plus button "Create user"
   and create the user with all relevant Data.(see Profil).

   • Option 2: fast entry

   In the context of use, Active Directory Integration can be used to create a new user with minimal permissions via a person selection mask. E.g. when creating measures

2. User role allocation:

   User roles can only be assigned by Administrators or Exoerts.
   For this go to "Administration ==> user-role-assignment" and assign the respective roles to the desired user.
   Important: Experts and Professionals need to be assigned to a management system in order to complete their tasks.Assigning Users to Management Systems

3. Change passwords:

   Change your own password:

   1. Click on the profile picture or the profile name.
   2. click on "Change password" in the bottom right corner
   3. Enter the old and new password and confirm

   Change a password as an Administrator or Expert:

   1. go to "Administration ==> user" and select the desired user
   2. click on "Change password" in the bottom right corner
   3. Enter the new password and confirm