TOC & Recently Viewed

Recently Viewed Topics

User Accounts

Path: Users > Users

The Users page displays the user accounts on SecurityCenter, limited by your account privileges. You can sort the columns or apply filters to locate specific user accounts. You can also add a user (Add a TNS-Authenticated User or Add an LDAP-Authenticated User) or Delete a User.

You can create one or more administrator accounts on SecurityCenter. You can create one or more organizational users (security managers and/or custom roles) per organization. Tenable™ recommends you make at least one TNS-authenticated administrator and security manager user per organization. If the LDAP service becomes unavailable, you can still log in.

Option Authentication Type Description
Role All

The role assigned to the user. For more information, see User Roles.

Administrator users can create Administrator or Security Manager user accounts. Organizational users can create Auditor, Credential Manager, Executive, No Role, Security Analyst, Security Manager, or Vulnerability Analyst accounts at their own privilege level or lower. For example:

  • If a user is an Auditor, they can create new Auditors or lesser roles.
  • If a custom user has the Create Policies privilege but not the Update Feeds privilege, that user can create users with the Create Policies privilege, but not the Update Feeds privilege.
Organization All The organization where you want to assign the user account.
First Name / Last Name All (Optional) The given first name and last name for the user.
Type All

The type of authentication you want to perform on the user:

  • Tenable Network Security (TNS)
  • Lightweight Directory Access Protocol (LDAP)

You must configure an LDAP server in order to see LDAP in the Type drop-down box.

Username / Password TNS

The username and password for the user account.

When selecting a username, it is sometimes easier to focus on the person’s real name as a convention (e.g., Bob Smith would become bsmith). However, it may also be useful to assign names based on role, such as auditNY.

Note: The username value is case-sensitive.

Tip:Tenable™ recommends using passwords that meet stringent length and complexity requirements.

User Must Change Password TNS

When enabled, the user must change their password upon initial login.

LDAP Server LDAP The server you want to use to authenticate the user.
Search String LDAP

The LDAP search string you want to use to filter your user search. Use the format: attribute=<filter text>. You can use wildcards, and the option accepts up to 1024 characters.

Examples

sAMAccountName=*

mail=a*

displayName=C*

LDAP Users Found LDAP

A filtered list of LDAP user accounts retrieved by the Search String. Your selection in this option populates the Username option.

Username LDAP

The username, populated by your LDAP Users Found selection. This username must match a user on the LDAP server in order to authenticate successfully.

Time Zone All The time zone for the user.
Scan Result Default Timeframe All

The default Completion Time filter you want applied when the user accesses or refreshes the scan results page.

Cached Fetching All

(Optional) When enabled, SecurityCenter caches plugin policy information and performs plugin policy downloads once per page load.

Group All

The group where you want to assign the user account. A user's group determines their access to SecurityCenter resources. For more information about groups, see Groups.

To grant a user limited privileges to other groups' resources, see Custom Group Permissions.

Asset

All

(Optional) Assigns a user to an asset list for which the user is responsible. Assigning a user to an asset list makes it easier to determine who in a group or organization should be assigned tickets, notifications, and other tasks to resolve particular issues. Selecting an asset updates the User Responsibility Summary in the Vulnerability Analysis section.

Contact Information All (Optional) The contact information for the user.

Copyright 2017 - 2019 Tenable, Inc. All rights reserved. Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trademarks of Tenable, Inc. Tenable, Tenable.io, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective owners.