{"id":7389,"date":"2026-08-31T10:41:38","date_gmt":"2026-08-31T07:41:38","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=announcement&#038;p=7389"},"modified":"2026-10-19T13:12:06","modified_gmt":"2026-10-19T10:12:06","slug":"introducing-role-based-access-control-rbac-for-withsecure-elements","status":"publish","type":"announcement","link":"https:\/\/support.withsecure.com\/de\/announcements\/introducing-role-based-access-control-rbac-for-withsecure-elements\/","title":{"rendered":"Introducing Role-Based Access Control (RBAC) for WithSecure Elements"},"content":{"rendered":"<p>We&#8217;re introducing a new <strong>Role-Based Access Control (RBAC)<\/strong> model for WithSecure Elements, giving partners and companies more granular, flexible, and secure control over who can access what within their organization.<\/p>\n<p><strong>What&#8217;s new:<\/strong><\/p>\n<ul>\n<li><strong>Full Microsoft Entra ID integration<\/strong> \u2014 sync users and security groups automatically, so day-to-day access management can happen entirely from Entra ID<\/li>\n<li><strong>Security groups<\/strong> \u2014 assign permissions to groups of users instead of managing access one person at a time<\/li>\n<li><strong>Access without organization membership<\/strong> \u2014 ability to assign partner roles within partner organizations without inviting partner security administrators to managed companies.<\/li>\n<li><strong>&#8222;All&#8220; roles<\/strong> \u2014 assign &#8222;Elements Reading All&#8220; or &#8222;Elements Editing All&#8220; to grant read or edit access across the entire solution in a single role, automatically kept up to date as new features are added.<\/li>\n<\/ul>\n<p><strong>How to get started:<\/strong><\/p>\n<p>RBAC is <strong>not enabled by default<\/strong>. It must be explicitly turned on under <em>Management \u2192 Access Control<\/em>, per organization, by an <strong>Identity and Access Management (IAM) Administrator<\/strong>. Enabling it for a partner organization does not automatically enable it for any managed company organizations below \u2014 each organization opts in independently.<\/p>\n<p>Note: Due to caching, the <em>Management \u2192 Access Control<\/em> area may not appear immediately \u2014 clearing your browser cache can help it show up sooner.<\/p>\n<p>Once enabled, the familiar <em>Organization Settings \u2192 Security Administrators<\/em> page becomes dedicated to SSO federation and Entra provisioning only, while all user, security group, and role assignment management moves to the new <strong>Management \u2192 Access Control<\/strong> area.<\/p>\n<p>For full details on the new model and step-by-step guidance, see the user guide:<br \/><a href=\"https:\/\/community.withsecure.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Fsupport.withsecure.com%2Fuserguides%2Fproduct.html%23business%2Felements-welcome%2Flatest%2Fen%2Fwhat_is_elements_rbac-latest-en\" target=\"_blank\" rel=\"nofollow noopener ugc\">Access control | WithSecure Elements User Guide<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>We&#8217;re introducing a new Role-Based Access Control (RBAC) model for WithSecure Elements, giving partners and companies more granular, flexible, and secure control over who can access what within their organization.&hellip;<\/p>\n","protected":false},"template":"","announcement_category":[142],"class_list":["post-7389","announcement","type-announcement","status-publish","hentry"],"acf":{"source_system":"vanilla-import","import_hash":"0f144dd02f7bf8c72f598c1e6dee1e53094ceed6","vanilla_article_id":33038,"legacy_author":"LukaszK","vanilla_url":"https:\/\/community.withsecure.com\/announcements-en\/kb\/articles\/33038-introducing-role-based-access-control-rbac-for-withsecure-elements","vanilla_category_id":142,"machine_translated":false},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/announcement\/7389","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/announcement"}],"about":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/types\/announcement"}],"version-history":[{"count":1,"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/announcement\/7389\/revisions"}],"predecessor-version":[{"id":8892,"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/announcement\/7389\/revisions\/8892"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/media?parent=7389"}],"wp:term":[{"taxonomy":"announcement_category","embeddable":true,"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/announcement_category?post=7389"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}