{"id":7038,"date":"2024-10-15T13:30:00","date_gmt":"2024-10-15T10:30:00","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=announcement&p=7038"},"modified":"2026-10-19T13:08:26","modified_gmt":"2026-10-19T10:08:26","slug":"elements-iam-administrator-role-available-in-self-registration","status":"publish","type":"announcement","link":"https:\/\/support.withsecure.com\/en\/announcements\/elements-iam-administrator-role-available-in-self-registration\/","title":{"rendered":"Elements IAM administrator role available in self-registration"},"content":{"rendered":"

Why are we introducing this role?<\/strong><\/h2>\n

As WithSecure Elements evolves, we will be adding new roles for specific purposes. For example, a company may only want to grant access to certain parts of Elements to specific users. This is known as Role Based Access Control, or RBAC.<\/p>\n

To facilitate the management of these roles, and granting users permissions to use them, we are introducing a new role to WithSecure Elements Security Center, which will be the gatekeeper of all user management and role assignments in the future<\/p>\n

More changes related to RBAC will follow, and these will be announced separately.<\/p>\n

The role in more detail<\/strong><\/h2>\n

Users with the new Identity and Access Management<\/strong> (IAM) role will be able to grant and revoke all Elements role permissions for other Administrators within the IAM administrator\u2019s own organization, as well as in child organizations. In effect, this means an IAM administrator at partner level can also grant authorization for their own customer\u2019s users.<\/p>\n

By adding this role to organizations, we can simplify and streamline the actions needed when we introduce other roles in the future.<\/p>\n

Eventually, user creation and modification permissions will be removed from other roles within Elements, with only users with the IAM role able to create and modify users. This will lead to increased security for the organizations, as only trusted admins will be able to grant access.<\/p>\n

Availability of the role<\/strong><\/h2>\n

Starting immediately, we will grant the IAM role during company self-registration, where this is allowed. This means that for most new companies, one of the very first thing they will do after receiving their subscription information is to create a user with IAM. This will be in addition to other subscription-specific role assignments such as Security Administrator for Endpoint Security<\/p>\n

To find out more about privileges, please see the user guide<\/a><\/p>\n

Later on, we will enable reminders within the Elements Security Center, to prompt users that the IAM role can be claimed. These changes will be announced separately.<\/p>\n

In Summary<\/strong><\/h2>\n