Limiting access to assets and issues

User access to specific assets and security issues can be limited through the use of groups and tags. User asset and security issue visibility is limited to the groups they are assigned to and any tags associated with these group assets.

The following table presents examples of visible and hidden assets based on the groups that a user is assigned to:

User assigned to	Visible assets	Hidden assets
A single group with no tags assigned	All assets that have been added to the group	Assets that have not been added to the group
A single group with tags assigned to the assets	Assets that have been added to the group that also have the tags assigned	Assets that have not been added to the group Any assets included in the assigned group that do not have the tags assigned
Multiple groups with no tags assigned	All assets that have been added to any of the assigned groups	Assets that have not been added to any of the groups
Multiple groups with tags assigned to the assets	Assets that have been added to any of the assigned groups that also have the tags assigned	Assets that have not been added to any of the groups Any assets included in the assigned groups that do not have the tags assigned

To assign users to a group:

1. Go to Attack Surface Management > Asset Management.

2. Select the Group Management tab.

   

3. Select Assign User. The Assigned User List dialog is displayed.

   

4. Select the users you want to assign:

   • Select specific users to assign to the group.

   • Select Select All to make the group assets and security issues visible to all users.

5. Click Submit.