Introducing Role-Based Access Control (RBAC) for WithSecure Elements

We’re introducing a new Role-Based Access Control (RBAC) model for WithSecure Elements, giving partners and companies more granular, flexible, and secure control over who can access what within their organization.

What’s new:

• Full Microsoft Entra ID integration — sync users and security groups automatically, so day-to-day access management can happen entirely from Entra ID
• Security groups — assign permissions to groups of users instead of managing access one person at a time
• Access without organization membership — ability to assign partner roles within partner organizations without inviting partner security administrators to managed companies.
• „All“ roles — assign „Elements Reading All“ or „Elements Editing All“ to grant read or edit access across the entire solution in a single role, automatically kept up to date as new features are added.

How to get started:

RBAC is not enabled by default. It must be explicitly turned on under Management → Access Control, per organization, by an Identity and Access Management (IAM) Administrator. Enabling it for a partner organization does not automatically enable it for any managed company organizations below — each organization opts in independently.

Note: Due to caching, the Management → Access Control area may not appear immediately — clearing your browser cache can help it show up sooner.

Once enabled, the familiar Organization Settings → Security Administrators page becomes dedicated to SSO federation and Entra provisioning only, while all user, security group, and role assignment management moves to the new Management → Access Control area.

For full details on the new model and step-by-step guidance, see the user guide:
Access control | WithSecure Elements User Guide