{ "withsecure_elements_help-latest-en.json": { "title": "title_withsecure_elements_help_067DB", "title_withsecure_elements_help_067DB": "Introduction to the WithSecure Elements solution", "shortdesc": "shortdesc_withsecure_elements_help_027F2", "shortdesc_withsecure_elements_help_027F2": "Overview of the WithSecure Elements solution and its offering.", "content.dt_withsecure_elements_help_0BDDE": "WithSecure Elements overview", "content.dd_withsecure_elements_help_0F1A4": "WithSecure Elements is our single modular solution made up of a full range of cyber security applications that offer end-to-end business and cloud coverage. The product includes our award-winning technologies in vulnerability management, patch management, endpoint protection, and endpoint detection and response. In today's unpredictable, ever-changing business environment, our all-in-one security solution helps to build and ensure a resilient business.", "content.dt_withsecure_elements_help_07CBC": "The WithSecure Elements offering", "content.dd_withsecure_elements_help_07058": "", "content.dd_p_withsecure_elements_help_00656": "WithSecure Elements has been specifically designed to support the modern agile business environment, which constantly needs to adapt not only to the external threat landscape, but also to the changing business needs.
", "content.dd_p_withsecure_elements_help_0B3BD": "To highlight some of the main benefits:
", "choice.choice_withsecure_elements_help_03B47": "Centralized and streamlined cyber security management to improve productivity", "choice.choice_withsecure_elements_help_0AA1F": "All the needed software components integrated into one for smooth deployment", "choice.choice_withsecure_elements_help_0EFB3": "Available as a fully managed service or as a self-managed cloud solution", "content.dd_p_withsecure_elements_help_043F6": "The solution also offers flexible licensing options, which means that you can pick and choose which of WithSecure Elements applications your business needs.
", "content.dt_withsecure_elements_help_08337": "Supported languages", "content.dd_withsecure_elements_help_06929": "", "content.dd_p_withsecure_elements_help_0E353": "The Elements Security Center supports the following languages:
", "choice.choice_withsecure_elements_help_08889": "English (US), Finnish, French, German, Italian, Japanese, Polish, Portuguese (Brazil), Spanish (Latin America), Swedish", "content.dd_p_withsecure_elements_help_06D8E": "Endpoint products support the following languages:
", "choice.choice_withsecure_elements_help_06C89": "English, Czech, Danish, Dutch, Estonian, Finnish, French, French (Canadian), German, Greek, Hungarian, Italian, Japanese, Norwegian, Polish, Portuguese, Portuguese (Brazilian), Romanian, Russian, Slovenian, Spanish, Spanish (Latin America), Swedish, Turkish, Traditional Chinese (Hong Kong), Traditional Chinese (Taiwan), and Simplified Chinese (PRC).", "content.dt_withsecure_elements_help_04C3F": "WithSecure Elements training", "content.dd_withsecure_elements_help_00AB8": "For an introductory Elements training session, log into the WithSecure Academy via the Partner Portal.", "content.dt_withsecure_elements_help_09C41": "Accessing the WithSecure Elements Security Center", "content.dd_withsecure_elements_help_01215": "You can access Elements Security Center as follows: WithSecure Elements Security Center", "desc": [ { "dl.dl_withsecure_elements_help_0E003": [ { "dlentry.withsecure-elements-in-a-nE0D8": [ "content.dt_withsecure_elements_help_0BDDE", "content.dd_withsecure_elements_help_0F1A4" ] }, { "dlentry.the-withsecure-elements-of0C00": [ "content.dt_withsecure_elements_help_07CBC", "content.dd_withsecure_elements_help_07058", "content.dd_p_withsecure_elements_help_00656", "content.dd_p_withsecure_elements_help_0B3BD", { "choices.ul_withsecure_elements_help_06852": [ "choice.choice_withsecure_elements_help_03B47", "choice.choice_withsecure_elements_help_0AA1F", "choice.choice_withsecure_elements_help_0EFB3" ] }, "content.dd_p_withsecure_elements_help_043F6" ] }, { "dlentry.supported-languages": [ "content.dt_withsecure_elements_help_08337", "content.dd_withsecure_elements_help_06929", "content.dd_p_withsecure_elements_help_0E353", { "choices.ul_withsecure_elements_help_0F5B2": [ "choice.choice_withsecure_elements_help_08889" ] }, "content.dd_p_withsecure_elements_help_06D8E", { "choices.ul_withsecure_elements_help_08941": [ "choice.choice_withsecure_elements_help_06C89" ] } ] }, { "dlentry.withsecure-elements-training": [ "content.dt_withsecure_elements_help_04C3F", "content.dd_withsecure_elements_help_00AB8" ] }, { "dlentry.accessing-the-withsecure-e9324": [ "content.dt_withsecure_elements_help_09C41", "content.dd_withsecure_elements_help_01215" ] } ] } ] }, "logging_in-latest-en.json": { "title": "title_logging_in_000001_0BA857E4", "title_logging_in_000001_0BA857E4": "Logging in", "shortdesc": "shortdesc_logging_in_000002_9B7851E5", "shortdesc_logging_in_000002_9B7851E5": "Requirements for logging in to WithSecure Elements Security Center using a Business Account. ", "content.p_logging_in_000012_D18408E2": "You need a WithSecure Business Account to access Elements Security Center. When you purchase the product from a WithSecure partner, the partner typically creates a Business Account for the first administrator in the managed organization. If this applies to you, you have received an email from WithSecure with a temporary password and a link to log in to Elements Security Center.", "content.p_logging_in_000018_58DD10A6": "If your account has not yet been created, but you have received a subscription key from your partner, you can use the subscription key to create a WithSecure Business account for the first administrator in the managed organization. To do that, use the company self-registration link for your specific region.", "desc": [ "content.p_logging_in_000012_D18408E2", "content.p_logging_in_000018_58DD10A6" ] }, "logging_in_to_non_federated_domains-latest-en.json": { "title": "title_logging_in_to_non_federa_0ADB9", "title_logging_in_to_non_federa_0ADB9": "Log in to non-federated domains", "shortdesc": "shortdesc_logging_in_to_non_federa_038ED", "shortdesc_logging_in_to_non_federa_038ED": "Logs in to a non-federated domain using your username and password.", "content.p_logging_in_to_non_federa_0555A": "To log in to a non-federated domain, do the following:", "content.p_logging_in_to_non_federa_06841": "The Log in page opens.", "step.step_logging_in_to_non_federa_04403": "Open the following link in the web browser: WithSecure Elements Security Center sign-in page.", "content.note_logging_in_to_non_federa_08EAF": "Note: If you do not have login credentials, ask your contact person for portal access. If you forget your password, you can order a new one by selecting Forgot password. Instructions for resetting your password are sent to your email address.", "content.p_logging_in_to_non_federa_0FC43": "Elements Security Center opens. You can toggle between the services using the navigation menu in the sidebar.", "step.step_logging_in_to_non_federa_0100A": "Enter your username and password, and select Log in.", "desc": [ "content.p_logging_in_to_non_federa_0555A", { "steps.steps_logging_in_to_non_federa_02AB6": [ "step.step_logging_in_to_non_federa_04403", "content.p_logging_in_to_non_federa_06841", "step.step_logging_in_to_non_federa_0100A", "content.note_logging_in_to_non_federa_08EAF", "content.p_logging_in_to_non_federa_0FC43" ] } ] }, "logging_in_to_a_federated_domain-latest-en.json": { "title": "title_logging_in_to_federated__05880", "title_logging_in_to_federated__05880": "Log in to federated domains", "shortdesc": "shortdesc_logging_in_to_federated__06F7A", "shortdesc_logging_in_to_federated__06F7A": "Logs in to a federated domain using Microsoft Entra ID credentials.", "content.p_logging_in_to_federated__0A6A1": "Before you begin, make sure that you have a Microsoft Entra account. If you are a new user, you must create one first.", "content.p_logging_in_to_federated__0F288": "To log in to a federated domain, do the following:", "content.p_logging_in_to_federated__0623F": "You are redirected to the Microsoft login page.", "step.step_logging_in_to_federated__068E9": "Open the following link in the web browser: WithSecure Elements Security Center sign-in page.", "content.note_logging_in_to_federated__0F621": "Important: If you are a first-time user and you had a WithSecure Business Account before the domain was federated, you are redirected to the Microsoft login page to enter your Microsoft credentials for authentication. This links your account to federated single sign-on. For subsequent logins, authentication will be handled via SSO using the Microsoft Entra ID account.", "step.step_logging_in_to_federated__0CA8D": "Enter your Entra credentials, and select Log in.", "content.p_logging_in_to_federated__0950C": "Elements Security Center opens. You can toggle between the services using the navigation menu in the sidebar.", "desc": [ "content.p_logging_in_to_federated__0A6A1", "content.p_logging_in_to_federated__0F288", { "steps.steps_logging_in_to_federated__0A5C6": [ "step.step_logging_in_to_federated__068E9", "content.p_logging_in_to_federated__0623F", "step.step_logging_in_to_federated__0CA8D", "content.note_logging_in_to_federated__0F621" ] }, "content.p_logging_in_to_federated__0950C" ] }, "mfa-latest-en.json": { "title": "title_mfa_000001_E9DF3B3D", "title_mfa_000001_E9DF3B3D": "Multi-factor authentication", "shortdesc": "shortdesc_mfa_000002_E8E2DBB8", "shortdesc_mfa_000002_E8E2DBB8": "Multi-factor authentication (MFA), also know as two-factor authentication (2FA), is a method of increasing security during the login process to systems.", "content.p_mfa_000011_27FA82DE": "MFA protects you and your environment against, for example, phishing and credential stuffing attacks.", "content.note_mfa_000012_1EFAF577": "Important: We recommend that you use Multi-Factor Authentication (MFA) to secure access to WithSecure Elements Security Center. Set up MFA immediately in Elements Security Center.", "content.note_mfa_000015_21E85E33": "Important: We recommend that, as a backup, you use more than one multi-factor authentication method. If your only multi-factor authentication method is lost, the account needs to be re-created.", "content.p_mfa_000016_94AEF88C": "When users log in to a system with their username and password, their credentials may already have been compromised, for example, due to a vulnerability in their browser or password manager. These leaked credentials may be on some publicly accessible list, used by attackers to gain entry into systems. With the addition of MFA, an extra step is needed when logging in. System access is traditionally protected with username and password, something that only you know. MFA introduces additional factors; something that you have (a security key or device) and something that you are (your fingerprint or facial recognition).", "desc": [ "content.p_mfa_000011_27FA82DE", "content.note_mfa_000012_1EFAF577", "content.note_mfa_000015_21E85E33", "content.p_mfa_000016_94AEF88C" ] }, "concept_k4l_nv5_m1c-latest-en.json": { "title": "title_mfa_methods_000001_3C4ED65E", "title_mfa_methods_000001_3C4ED65E": "MFA methods", "shortdesc": "shortdesc_mfa_methods_000002_B3223654", "shortdesc_mfa_methods_000002_B3223654": "WithSecure Elements has multiple MFA methods to keep your access safe as possible. ", "content.p_mfa_methods_000015_D0C2EB27": "The methods include the following:", "step.step_mfa_methods_000017_BD2D0658": "Authenticator applications with Time-Based One-Time Password (TOTP), such as Microsoft Authenticator, Google Authenticator, Auth0 Guardian, or other authenticator applications that are available either on your computer or mobile devices. A six-digit authentication code is sent to the Authenticator application, and you need to enter it into the login dialog to continue.", "step.step_mfa_methods_00001A_537FA044": "Push notifications with Auth0 Guardian authenticator - allows you to approve an authentication request with a single click of a button. The Auth0 Guardian Multi-Factor Authenticator application is available in Google Play and AppStore.", "content.note_mfa_methods_000020_D23D12C9": "Important: SMS messages are vulnerable to security breaches and malicious software, and receiving them may also charge you extra fees. For these reasons, we recommend that you only use SMS when there are no safer alternatives for you to use.", "content.note_mfa_methods_000021_AB3F0653": "Tip: If you request several SMS codes in a short time, further messages might be blocked temporarily. The block clears after a short while. For everyday sign-in, we recommend an authenticator app or a security key (WebAuthn/FIDO2), which are more reliable than SMS.", "step.step_mfa_methods_00001E_3BFBC094": "Phone number for Short Message Service (SMS) messages with One-Time Passwords (OTP) - A six-digit authentication code is sent to your configured mobile phone number via SMS. You need to enter the code into the login dialog to continue.", "step.step_mfa_methods_000022_D3CCAE11": "Secure USB keys, such as Yubico YubiKey, Google Titan, and others that support the FIDO2 standard (FIDO2 specification)", "step.step_mfa_methods_000025_88720CB8": "Smartphones or other devices that support the FIDO2 standard (FIDO2 specification)", "content.note_mfa_methods_00002B_BCDE8731": "Important: Device biometrics are specific to individual devices and it must not be the only authentication method that you use. You are prompted to add this authentication method for each device that you use.", "step.step_mfa_methods_000028_625F50F3": "Device biometrics, fingerprint or facial recognition or Windows Hello from your device using WebAuthn (Web Authentication (WebAuthn) specification).", "desc": [ "content.p_mfa_methods_000015_D0C2EB27", { "steps.ul_mfa_methods_000016_D8BC2EDE": [ "step.step_mfa_methods_000017_BD2D0658", "step.step_mfa_methods_00001A_537FA044", "step.step_mfa_methods_00001E_3BFBC094", "content.note_mfa_methods_000020_D23D12C9", "content.note_mfa_methods_000021_AB3F0653", "step.step_mfa_methods_000022_D3CCAE11", "step.step_mfa_methods_000025_88720CB8", "step.step_mfa_methods_000028_625F50F3", "content.note_mfa_methods_00002B_BCDE8731" ] } ] }, "setting_up_2fa-latest-en.json": { "title": "title_setting_up_2fa_000001_91F702F1", "title_setting_up_2fa_000001_91F702F1": "Choose multi-factor authentication", "shortdesc": "shortdesc_setting_up_2fa_000002_BD431774", "shortdesc_setting_up_2fa_000002_BD431774": "Chooses one or more multi-factor authentication methods.", "content.p_setting_up_2fa_000011_6D8DA1CB": "Before you choose a multi-factor authentication method:", "step.step_setting_up_2fa_000013_38B7268F": "Install an authentication app, for example, Google Authenticator on your mobile device.", "step.step_setting_up_2fa_000014_032A47C1": "Make sure that your mobile device can read QR codes.", "content.p_setting_up_2fa_000016_65FB154E": "Choose the most secure authentication method available to you. FIDO2 is the best option, followed by authenticator apps. SMS should only be used as a last resort. Note that if you lose your mobile device and have not backed up your security keys or authenticator app, you will lose access to your account, so SMS can be used as a backup method in such situations.", "content.note_setting_up_2fa_000017_8CAC0BAC": "Tip: Register more than one authentication method. If you lose access to all of your authentication methods, the account cannot be reset and must be re-created.", "content.p_setting_up_2fa_000018_22FD18C5": "To choose one or more multi-factor authentication methods:", "step.step_setting_up_2fa_00001A_D59D4B14": "Log in to WithSecure Elements Security Center with your email address and password.", "content.note_setting_up_2fa_000022_F83FCA71": "Note: If you have already configured one or more MFA methods, select Change.", "content.p_setting_up_2fa_000024_5114260E": "The Multi-Factor Authentication Settings window opens.", "step.step_setting_up_2fa_00001D_A5AA9423": "Select at the top-right corner, then select My settings.", "content.p_setting_up_2fa_000029_6814FDF4": "The Verify your identity screen opens.", "step.step_setting_up_2fa_000026_197D4D85": "Select Add to select one or more of the authentication options that you want to use.", "content.p_setting_up_2fa_00002D_00B5006A": "Multi-factor authentication is now set up for your WithSecure Elements account.", "content.note_setting_up_2fa_00002F_C1BD13C1": "Note: We recommend that you select multiple multi-factor authentication methods as a backup. If your only multi-factor authentication method is lost, there is no way to reset the multi-factor authentication. If all multi-factor authentication methods are lost, the account needs to be re-created.", "step.step_setting_up_2fa_00002B_C4019025": "Follow the instructions on the screen. The required actions depend on the MFA method that you selected.", "desc": [ "content.p_setting_up_2fa_000011_6D8DA1CB", { "steps.ul_setting_up_2fa_000012_073F3331": [ "step.step_setting_up_2fa_000013_38B7268F", "step.step_setting_up_2fa_000014_032A47C1" ] }, "content.p_setting_up_2fa_000016_65FB154E", "content.note_setting_up_2fa_000017_8CAC0BAC", "content.p_setting_up_2fa_000018_22FD18C5", { "steps.steps_setting_up_2fa_000019_C286A671": [ "step.step_setting_up_2fa_00001A_D59D4B14", "step.step_setting_up_2fa_00001D_A5AA9423", "content.note_setting_up_2fa_000022_F83FCA71", "content.p_setting_up_2fa_000024_5114260E", "step.step_setting_up_2fa_000026_197D4D85", "content.p_setting_up_2fa_000029_6814FDF4", "step.step_setting_up_2fa_00002B_C4019025", "content.p_setting_up_2fa_00002D_00B5006A", "content.note_setting_up_2fa_00002F_C1BD13C1" ] } ] }, "task_qc3_vmh_k1c-latest-en.json": { "title": "title_removing_mfa_000001_D53C16DF", "title_removing_mfa_000001_D53C16DF": "Remove a multi-factor authentication", "shortdesc": "shortdesc_removing_mfa_000002_0CA2A01B", "shortdesc_removing_mfa_000002_0CA2A01B": "Removes a multi-factor authentication method.", "content.p_removing_mfa_000011_884BA051": "To remove a multi-factor authentication method:", "step.step_removing_mfa_000013_FE193C0B": "Log in with your email address and password.", "step.step_removing_mfa_000015_D31813E7": "Enter your multi-factor authentication code and select Continue.", "step.step_removing_mfa_000018_6D917E9B": "Select at the top-right corner, then select My settings.", "content.p_removing_mfa_000020_23C12649": "The Verify your identity window opens.", "step.step_removing_mfa_00001C_E4410FD3": "Select Change next to Multi-factor Authentication enabled.", "step.step_removing_mfa_000022_C4B3B02B": "Follow the instructions on the screen.", "step.step_removing_mfa_000024_BE8B3AB9": "Select Remove next to the multi-factor authentication methods that you want to remove.", "step.step_removing_mfa_000027_29D4F4A1": "Enter your email address and password.", "desc": [ "content.p_removing_mfa_000011_884BA051", { "steps.steps_removing_mfa_000012_5D9D81CC": [ "step.step_removing_mfa_000013_FE193C0B", "step.step_removing_mfa_000015_D31813E7", "step.step_removing_mfa_000018_6D917E9B", "step.step_removing_mfa_00001C_E4410FD3", "content.p_removing_mfa_000020_23C12649", "step.step_removing_mfa_000022_C4B3B02B", "step.step_removing_mfa_000024_BE8B3AB9", "step.step_removing_mfa_000027_29D4F4A1" ] } ] }, "using_device_biometrics-latest-en.json": { "title": "title_using_device_biometrics_0096D8", "title_using_device_biometrics_0096D8": "Use device biometrics", "shortdesc": "shortdesc_using_device_biometrics_004693", "shortdesc_using_device_biometrics_004693": "Biometric authentication requires that you first have another multi-factor authentication (MFA) method in use.", "content.p_using_device_biometrics_0021E5": "You must already have another multi-factor authentication (MFA) method set up before you can use device biometrics.", "content.p_using_device_biometrics_00557F": "To use device biometrics, do the following:", "content.p_using_device_biometrics_009179": "The My settings window opens.", "step.step_using_device_biometrics_002951": "In Elements Security Center, select at the top-right corner, and select My settings.", "content.p_using_device_biometrics_00A090": "The Use fingerprint or face recognition to log in window opens.", "step.step_using_device_biometrics_00C376": "If you already have one or more MFA methods configured, select Change.", "step.step_using_device_biometrics_00A1BE": "Select Try another method.", "content.p_using_device_biometrics_00E9EA": "The Log in faster on this device window opens.", "step.step_using_device_biometrics_00E158": "Use your already configured MFA method to verify your identity and select Continue.", "content.p_using_device_biometrics_00CDBA": "The Save your passkey window opens.", "step.step_using_device_biometrics_00DCCB": "Select Continue.", "content.p_using_device_biometrics_00DF70": "The Device registration successful window opens.", "step.step_using_device_biometrics_006713": "Select Continue to save the passkey to your device, and then select Ok.", "content.p_using_device_biometrics_0038A6": "The Multi-factor authentication settings window now shows your new device biometric key.", "step.step_using_device_biometrics_00CC2B": "Select Continue.", "step.step_using_device_biometrics_00D8D7": "At the bottom of the screen, select Back to return to the Home page", "content.p_using_device_biometrics_00C377": "The next time that you log in to Elements Security Center on this device, you can authenticate using your biometric key, which makes the process faster and more secure.", "desc": [ "content.p_using_device_biometrics_0021E5", "content.p_using_device_biometrics_00557F", { "steps.steps_using_device_biometrics_0049A1": [ "step.step_using_device_biometrics_002951", "content.p_using_device_biometrics_009179", "step.step_using_device_biometrics_00C376", "content.p_using_device_biometrics_00A090", "step.step_using_device_biometrics_00A1BE", "step.step_using_device_biometrics_00E158", "content.p_using_device_biometrics_00E9EA", "step.step_using_device_biometrics_00DCCB", "content.p_using_device_biometrics_00CDBA", "step.step_using_device_biometrics_006713", "content.p_using_device_biometrics_00DF70", "step.step_using_device_biometrics_00CC2B", "content.p_using_device_biometrics_0038A6", "step.step_using_device_biometrics_00D8D7" ] }, "content.p_using_device_biometrics_00C377" ] }, "federated_single_sign_on-latest-en.json": { "title": "title_federated_single_sign_on_03EAF", "title_federated_single_sign_on_03EAF": "Federated single sign-on", "shortdesc": "shortdesc_federated_single_sign_on_037DF", "shortdesc_federated_single_sign_on_037DF": "Federated single sign-on (FSSO) lets users authenticate once with an identity provider and access several applications without logging in separately.", "content.p_federated_single_sign_on_0F3F6": "Federated single sign-on (FSSO) lets users authenticate once and access several applications or services across different domains or organizations. Users do not need to log in separately for each one. When users log in, they submit their credentials, such as a username and password, to an identity provider. The identity provider then checks these credentials. After successful authentication, the identity provider generates a digitally-signed token. This token proves the user's identity. When users access other applications or services in different domains or organizations, their browser automatically uses this token. The cloud identity service checks the token and grants access without requiring the user to log in again.", "content.p_federated_single_sign_on_0DB35": "FSSO makes access across various systems simpler. It lets users authenticate once and move smoothly between different applications or services. It also improves security and user experience by removing the need for multiple logins. When a user is removed from an identity provider, they automatically lose the ability to log in to Elements Security Center. This makes managing user access easier and more secure.", "desc": [ "content.p_federated_single_sign_on_0F3F6", "content.p_federated_single_sign_on_0DB35" ] }, "federated_sso_prereqs-latest-en.json": { "title": "title_federated_sso_prereqs_0000ACF3", "title_federated_sso_prereqs_0000ACF3": "Prerequisites", "shortdesc": "shortdesc_federated_sso_prereqs_00006083", "shortdesc_federated_sso_prereqs_00006083": "To link an Entra account to a WithSecure Elements account, the Entra ID tenant account must have the email address set up and matching the email address of the corresponding Elements account.", "content.p_federated_sso_prereqs_0000BCF9": "If the email address is not set up or does not match the email address of the corresponding Elements account, the linking fails, and the user is not able to access WithSecure Elements Security Center. User email address information is visible in the Microsoft Entra Admin Center under Contact Information > Email.", "content.note_federated_sso_prereqs_00005962": "Note: All users must have an Elements account. There is no automatic user provisioning from Microsoft Entra ID.", "desc": [ "content.p_federated_sso_prereqs_0000BCF9", "content.note_federated_sso_prereqs_00005962" ] }, "sso_considerations-latest-en.json": { "title": "title_before_implementing_sso_00966A", "title_before_implementing_sso_00966A": "Before implementing single sign-on (SSO)", "shortdesc": "shortdesc_before_implementing_sso_005288", "shortdesc_before_implementing_sso_005288": "These requirements and considerations apply before you implement single sign-on (SSO).", "content.title_before_implementing_sso_00B273": "Why is plus addressing problematic?", "content.p_before_implementing_sso_007638": "Microsoft Entra ID does not support email aliases or email addresses with plus addressing for authentication. When you configure SSO and start to use it, all email aliases and Elements user accounts with plus addressing stop working.", "content.note_before_implementing_sso_00C563": "Important: Do not configure SSO using email aliases or Elements user accounts with plus addressing.", "content.title_before_implementing_sso_005A2F": "Frequently asked questions", "content.dt_before_implementing_sso_00004B": "How to avoid users losing access to remove federation?", "content.dd_before_implementing_sso_00C9B6": "When implementing federation, make sure that there is a user account without plus addressing or email alias. Otherwise, you may lose access to Elements Security Center.", "content.dt_before_implementing_sso_00256E": "How does SSO change the login process?", "content.dd_before_implementing_sso_00F4D3": "After federation, users authenticate through Microsoft Entra ID, eliminating the need for a separate login flow for Elements Security Center.", "content.dt_before_implementing_sso_0061F2": "How often do users with Elements Entra ID need to authenticate to Elements Security Center?", "content.dd_before_implementing_sso_004ADE": "If users do not have a valid federated authentication session, Elements Security Center requires them to log in and authenticate.", "content.title_before_implementing_sso_00A373": "Global impact of SSO", "content.p_before_implementing_sso_007EEA": "Implementing SSO affects all organizations and hierarchies with user accounts from federated email domain. Some users have accounts across various partner- and service partner-level hierarchies, and changes will affect all these hierarchies. For example, if Partner A has their own Solution Provider (SOP) and shares a domain with other partners' SOPs, the SSO affects the Elements level, not only the specific SOP. An email domain can only be federated once within an organization, but this will affect all user accounts associated with that domain.", "content.title_before_implementing_sso_0015A0": "Hierarchy-level considerations", "content.p_before_implementing_sso_00F91C": "Make sure to generate SSO from the appropriate hierarchy level, because it can be only modified from there.", "content.title_before_implementing_sso_0013CA": "Handling Microsoft Entra ID account removal", "content.p_before_implementing_sso_001400": "If a Microsoft Entra ID account is removed, the Elements administrator is not automatically deleted, but the account will no longer function. You need to manually delete the administrator.", "desc": [ "content.title_before_implementing_sso_00B273", "content.p_before_implementing_sso_007638", "content.note_before_implementing_sso_00C563", "content.title_before_implementing_sso_005A2F", { "dl.dl_before_implementing_sso_00D7F0": [ { "dlentry.how-to-avoid-users-losing-3BD0": [ "content.dt_before_implementing_sso_00004B", "content.dd_before_implementing_sso_00C9B6" ] }, { "dlentry.how-does-sso-change-the-lo74D6": [ "content.dt_before_implementing_sso_00256E", "content.dd_before_implementing_sso_00F4D3" ] }, { "dlentry.how-often-do-users-with-el475D": [ "content.dt_before_implementing_sso_0061F2", "content.dd_before_implementing_sso_004ADE" ] } ] }, "content.title_before_implementing_sso_00A373", "content.p_before_implementing_sso_007EEA", "content.title_before_implementing_sso_0015A0", "content.p_before_implementing_sso_00F91C", "content.title_before_implementing_sso_0013CA", "content.p_before_implementing_sso_001400" ] }, "setting_up_federated_single_sign_on-latest-en.json": { "title": "title_setting_up_federated_sin_0A06F", "title_setting_up_federated_sin_0A06F": "Set up federated single sign-on with Microsoft Entra ID", "shortdesc": "shortdesc_setting_up_federated_sin_00DF4", "shortdesc_setting_up_federated_sin_00DF4": "Sets up federated single sign-on so users can sign in with their Microsoft Entra ID credentials.", "step.step_setting_up_federated_sin_08B54": "A non-federated domain - a domain name, for example yourcompanydomain.com, that is not federated with Elements Security Center", "step.step_setting_up_federated_sin_08B43": "Elements Security Center account - an account in Elements Security Center with the assigned Endpoint Protection Full editing permission. This account is necessary for managing federated domains and later logging in to Elements Security Center using an Entra ID account.", "content.note_setting_up_federated_sin_09CC9": "Note: The user who is federating a domain must have a global administrator role in the Entra ID tenant for this scenario. Once the domain is federated, any user with an Entra account can log in, provided they also have a corresponding Elements account.", "step.step_setting_up_federated_sin_04A69": "Entra ID tenant account - an account in the Entra ID tenant that manages the domain that you want to federate. This account is essential for logging in to Elements Security Center and federating the domain.", "content.p_setting_up_federated_sin_069F8": "Set up federated single sign-on so users can sign in to Elements with their Microsoft Entra ID credentials.", "step.step_setting_up_federated_sin_03EA5": "Log in to WithSecure Elements Security Center sign-in page.", "content.p_setting_up_federated_sin_07FD0": "The Configure federated single sign-on window opens showing the status of the domain that matches your email address.", "step.step_setting_up_federated_sin_08884": "Under Management > Organization Settings > Security Administrators , select Configure federated single sign-on.", "step.step_setting_up_federated_sin_044AE": "Select Log in to Microsoft", "step.step_setting_up_federated_sin_0BEFB": "In the pop-up window that opens, enter your password for the Entra tenant, and select Sign in.", "content.p_setting_up_federated_sin_0D57F": "The Single Sign-on Access Federation window is refreshed and shows Validation successful.", "content.note_setting_up_federated_sin_0C2F8": "Note: If you select Cancel, the window shows Validation failed. Other reasons for unsuccessful validation may include the process taking too long or a lack of the Global Administrator role.", "step.step_setting_up_federated_sin_01C97": "Select Consent on behalf of your organization and then select Accept.", "content.p_setting_up_federated_sin_04406": "After you have federated the domain, its status changes to The Federated single sign-on is enabled for [domain name].", "step.step_setting_up_federated_sin_0E648": "To federate the domain, select Enable federated single sign-on.", "desc": [ { "steps.ul_setting_up_federated_sin_0A097": [ "step.step_setting_up_federated_sin_08B54", "step.step_setting_up_federated_sin_08B43", "step.step_setting_up_federated_sin_04A69", "content.note_setting_up_federated_sin_09CC9" ] }, "content.p_setting_up_federated_sin_069F8", { "steps.steps_setting_up_federated_sin_0BBBE": [ "step.step_setting_up_federated_sin_03EA5", "step.step_setting_up_federated_sin_08884", "content.p_setting_up_federated_sin_07FD0", "step.step_setting_up_federated_sin_044AE", "step.step_setting_up_federated_sin_0BEFB", "step.step_setting_up_federated_sin_01C97", "content.p_setting_up_federated_sin_0D57F", "content.note_setting_up_federated_sin_0C2F8", "step.step_setting_up_federated_sin_0E648", "content.p_setting_up_federated_sin_04406" ] } ] }, "linking_user_identities-latest-en.json": { "title": "title_linking_user_identities_00F693", "title_linking_user_identities_00F693": "Link user identities", "shortdesc": "shortdesc_linking_user_identities_008855", "shortdesc_linking_user_identities_008855": "Links user identities in Elements Security Center for federated domains.", "content.note_linking_user_identities_00D4DF": "Note: Every user with an email address in the domain only needs to link their identity once, during their initial login after the domain has been federated.", "content.p_linking_user_identities_0086F9": "Make sure you have the following:", "step.step_linking_user_identities_00D2E4": "A federated domain", "content.note_linking_user_identities_00E3E5": "Note: These accounts are manually created by other administrators. This flow occurs when the users log in for the first time.", "step.step_linking_user_identities_005FE2": "A user with an Elements account whose email address belongs to the federated domain", "step.step_linking_user_identities_00AA31": "The user must not be currently logged in", "step.step_linking_user_identities_006DB7": "The account that is used to log in to Elements Security Center should not have undergone identity linking before", "content.p_linking_user_identities_00FAF0": "To link identities:", "step.step_linking_user_identities_0003D6": "Log in to WithSecure Elements Security Center sign-in page.", "step.step_linking_user_identities_00A595": "Enter your email address and select Continue.", "content.note_linking_user_identities_00CC0B": "Note: Depending on the domain configuration, you may need to complete multi-factor authentication (MFA).", "step.step_linking_user_identities_0035C0": "If your email address is already authenticated in the domain, you are redirected to the identity linking flow; if your email address is not yet authenticated in the domain, you are asked to provide your domain password.", "step.step_linking_user_identities_00633C": "Enter your email address again, and select Continue.", "content.p_linking_user_identities_0086F2": "A window opens confirming that your business account is now going to be linked (federated) with your Entra ID account.", "step.step_linking_user_identities_00AA33": "Next, enter your Elements account password and select Continue", "step.step_linking_user_identities_007BE2": "Select Continue to proceed.", "desc": [ "content.note_linking_user_identities_00D4DF", "content.p_linking_user_identities_0086F9", { "steps.ul_linking_user_identities_001AC4": [ "step.step_linking_user_identities_00D2E4", "step.step_linking_user_identities_005FE2", "content.note_linking_user_identities_00E3E5", "step.step_linking_user_identities_00AA31", "step.step_linking_user_identities_006DB7" ] }, "content.p_linking_user_identities_00FAF0", { "steps.steps_linking_user_identities_00D573": [ "step.step_linking_user_identities_0003D6", "step.step_linking_user_identities_00A595", "step.step_linking_user_identities_0035C0", "content.note_linking_user_identities_00CC0B", "step.step_linking_user_identities_00633C", "step.step_linking_user_identities_00AA33", "content.p_linking_user_identities_0086F2", "step.step_linking_user_identities_007BE2" ] } ] }, "removing_federated_domain-latest-en.json": { "title": "title_removing_federated_domai_0DA32", "title_removing_federated_domai_0DA32": "Remove federation from a domain", "shortdesc": "shortdesc_removing_federated_domai_02FB3", "shortdesc_removing_federated_domai_02FB3": "Removes single sign-on federation from a domain.", "step.step_removing_federated_domai_03A4F": "A federated domain", "step.step_removing_federated_domai_04AA7": "An account in Elements Security Center with Endpoint Protection Full editing permission and an email address in the federated domain.", "content.note_removing_federated_domai_0234E": "Note: When federation is removed from a domain, users that have email address in that domain must use their Elements credentials to log in. However, if an Elements account was created after the domain was federated, users have not received an email with their initial password and do not know their Elements credentials. In that case, they must reset their password.", "content.p_removing_federated_domai_0199C": "To remove federation:", "step.step_removing_federated_domai_0F485": "Log in to WithSecure Elements Security Center sign-in page.", "content.p_removing_federated_domai_00F4F": "The Federated Single sign-on window opens showing the status of the domain that matches your email address.", "step.step_removing_federated_domai_03C6B": "Select SSO Access Federation.", "content.p_removing_federated_domai_0678A": "A confirmation window opens.", "step.step_removing_federated_domai_0E82A": "Select Remove Federated Single sign-on.", "content.p_removing_federated_domai_01DF6": "Single sign-on federation is removed from the domain account.", "step.step_removing_federated_domai_0C037": "Select Ok.", "desc": [ { "steps.ul_removing_federated_domai_079B2": [ "step.step_removing_federated_domai_03A4F", "step.step_removing_federated_domai_04AA7" ] }, "content.note_removing_federated_domai_0234E", "content.p_removing_federated_domai_0199C", { "steps.steps_removing_federated_domai_0A8B2": [ "step.step_removing_federated_domai_0F485", "step.step_removing_federated_domai_03C6B", "content.p_removing_federated_domai_00F4F", "step.step_removing_federated_domai_0E82A", "content.p_removing_federated_domai_0678A", "step.step_removing_federated_domai_0C037", "content.p_removing_federated_domai_01DF6" ] } ] }, "user_management-latest-en.json": { "title": "title_user_management_000001_31B432F", "title_user_management_000001_31B432F": "User management", "shortdesc": "shortdesc_user_management_000002_C576F6F", "shortdesc_user_management_000002_C576F6F": "Instructions about access rights, adding and managing customer companies, and adding and managing administrator accounts. ", "content.p_user_management_000011_3FF8354": "This section describes how to manage who can access WithSecure Elements Security Center, including access rights and roles, the scope selector, and adding and managing administrator accounts.", "desc": [ "content.p_user_management_000011_3FF8354" ] }, "access_rights-latest-en.json": { "title": "title_access_rights_000001_B00A5704", "title_access_rights_000001_B00A5704": "About access rights", "shortdesc": "shortdesc_access_rights_000002_0FF56B8E", "shortdesc_access_rights_000002_0FF56B8E": "New users who have been granted access to Endpoint Protection (EPP) features do not automatically receive access to Extended Detection and Response (XDR) features. Administrators can assign EPP and XDR capabilities to separate user groups and combine them as necessary.", "content.p_access_rights_000012_E13260DB": "New users who get granted access to Exposure Management must also be assigned the Vulnerabilities role to manage vulnerability-related matters, including configuring scans and running reports.", "content.p_access_rights_000015_3D316F0C": "You can set access rights when you create a new account, or edit an existing account.", "desc": [ "content.p_access_rights_000012_E13260DB", "content.p_access_rights_000015_3D316F0C" ], "related": [ "add_admin_account_company-latest-en", "edit_admin_account-latest-en" ] }, "access_rights_by_role-latest-en.json": { "title": "title_access_rights_by_role_00003AF9", "title_access_rights_by_role_00003AF9": "Access rights by role", "shortdesc": "shortdesc_access_rights_by_role_0000C61A", "shortdesc_access_rights_by_role_0000C61A": "The roles and access rights available for each WithSecure Elements product area, with the audit-log entry for each role.", "content.title_access_rights_by_role_000022C6": "Exposure Management – Exposure", "content.dt_access_rights_by_role_0000CC85": "Full editing", "content.dd_access_rights_by_role_0000B825": "", "content.dd_p_access_rights_by_role_000040CB": "Allows access to the following Exposure Management features:
", "choice.choice_access_rights_by_role_00006838": "Environment: Devices, Cloud, Network, Exposure, Identities", "choice.choice_access_rights_by_role_000015FC": "Security configurations", "choice.choice_access_rights_by_role_000008BF": "Reports", "choice.choice_access_rights_by_role_00004E39": "Management", "choice.choice_access_rights_by_role_0000DAB4": "Cloud onboarding", "content.note_access_rights_by_role_0000FFDD": "Note: Security Administrators can create additional administrators and assign this role to users within the same organization (will be replaced by the IAM role)
", "content.dd_p_access_rights_by_role_0000F8A6": "Audit logs entry: cspm: admin
", "content.title_access_rights_by_role_00005222": "Exposure Management – Vulnerabilities", "content.dt_access_rights_by_role_00001EA9": "Management", "content.dd_access_rights_by_role_00002C3D": "", "content.dd_p_access_rights_by_role_0000BBF3": "Allows full access to the Vulnerability Management views, settings, and findings
", "content.note_access_rights_by_role_0000527A": "Note: Security Administrators can create additional administrators and assign this role to users within the same organization (will be replaced by the IAM role)
", "content.dd_p_access_rights_by_role_0000690F": "Audit logs entry: vm: administrator
", "content.dt_access_rights_by_role_000086E4": "Team member", "content.dd_access_rights_by_role_0000B8D9": "Allows access to the Vulnerability Management views, settings, and findings, with no permission for managing users and the system. Audit logs entry: vm: team_member", "content.dt_access_rights_by_role_00009E01": "Read-only", "content.dd_access_rights_by_role_0000AD10": "View-only access with no permission for managing users. Audit logs entry: vm: readonly_team_member", "content.title_access_rights_by_role_0000BE4B": "Collaboration Protection", "content.dt_access_rights_by_role_0000E69D": "Admin", "content.dd_access_rights_by_role_0000137D": "", "content.dd_p_access_rights_by_role_00001187": "Allows the access to the Collaboration Protection views and edit the following protection features:
", "choice.choice_access_rights_by_role_00008767": "Handling detections", "choice.choice_access_rights_by_role_00002206": "Managing Exchange and shared files settings", "choice.choice_access_rights_by_role_0000E393": "Managing policies, quarantining files, and generating reports", "content.dd_p_access_rights_by_role_0000DB2F": "Audit logs entry: cpo365:admin
", "content.dt_access_rights_by_role_00003A0D": "Read-only", "content.dd_access_rights_by_role_0000CDB4": "Grants view-only access to the Collaboration Protection views. Audit logs entry: cpo: readonly", "content.dt_access_rights_by_role_0000CECF": "Quarantine manager", "content.dd_access_rights_by_role_0000EF2F": "Allows access to the Collaboration Protection views that are related to detections and quarantining files. Audit logs entry: cpo365:quarantine_mgr", "content.title_access_rights_by_role_00003474": "Collaboration Protection – Management", "content.dt_access_rights_by_role_0000FD21": "Admin", "content.dd_access_rights_by_role_00007BB5": "", "content.dd_p_access_rights_by_role_00003119": "Allows the access to management features, including user creation, role management, subscription details, and organization settings.
", "content.note_access_rights_by_role_00008B99": "Note: Security Administrators can create additional administrators and assign this role to users within the same organization (will be replaced by the IAM role)
", "content.dd_p_access_rights_by_role_0000B5C8": "Audit logs entry: fusion_admin
", "content.title_access_rights_by_role_0000FDA1": "Endpoint Protection", "content.dt_access_rights_by_role_0000872A": "No access", "content.dd_access_rights_by_role_0000C7F4": "", "content.dd_p_access_rights_by_role_00005FBB": "No access to Endpoint protection features including:
", "choice.choice_access_rights_by_role_0000A698": "Device management", "choice.choice_access_rights_by_role_0000A6AB": "Patch management", "choice.choice_access_rights_by_role_000049F8": "Device security posture", "choice.choice_access_rights_by_role_0000A343": "Software reputation", "choice.choice_access_rights_by_role_0000ACDE": "Security Events", "choice.choice_access_rights_by_role_0000DDAE": "Profiles", "choice.choice_access_rights_by_role_0000AF9A": "Home/Endpoint protection", "choice.choice_access_rights_by_role_00008CE7": "Reports", "content.note_access_rights_by_role_000076F5": "Note: Unless access is coming from some other role, for example Exposure.
", "content.title_access_rights_by_role_0000BD4D": "Endpoint Protection – Computers and mobiles", "content.dt_access_rights_by_role_0000DEEF": "Full editing", "content.dd_access_rights_by_role_00008B24": "", "content.dd_p_access_rights_by_role_000033DE": "Allows the access to the following features:
", "choice.choice_access_rights_by_role_00009E2B": "Security configuration/profiles", "choice.choice_access_rights_by_role_0000E367": "Security information, including device status, dashboard, security events and patch management", "choice.choice_access_rights_by_role_0000FD81": "Security operations, such as removing or isolating devices, updating profiles", "choice.choice_access_rights_by_role_0000AF5F": "Handling subscriptions", "choice.choice_access_rights_by_role_0000B010": "Managing user accounts", "choice.choice_access_rights_by_role_0000362D": "Do cloud onboarding", "content.note_access_rights_by_role_0000F0EF": "Note: The Security Administrator role, along with the \"Servers - Full editing\" role is required to create additional administrators and assign this role to users within the same organization (will be replaced by the IAM role).
", "content.dd_p_access_rights_by_role_0000341D": "Audit logs entry: epp: manage_computers_mobiles_only
", "content.dd_p_access_rights_by_role_000038BC": "or epp: manage_all
", "content.dt_access_rights_by_role_00009EF6": "Read-only", "content.p_access_rights_by_role_0000B6C7": "Audit logs entry: epp: manage_servers_only
", "content.p_access_rights_by_role_0000A8F2": "or epp: readonly", "content.title_access_rights_by_role_0000ACC6": "Endpoint Protection – Servers", "content.dt_access_rights_by_role_000065A4": "Full editing", "content.dd_access_rights_by_role_0000A885": "", "content.dd_p_access_rights_by_role_0000B80A": "Allows the access to the following features:
", "choice.choice_access_rights_by_role_00006F98": "Security configurations/profiles", "choice.choice_access_rights_by_role_00006E4C": "Security information, including device status, dashboard, security events and software updates", "choice.choice_access_rights_by_role_0000FDDC": "Security operations, such as removing or isolating devices, updating profiles", "choice.choice_access_rights_by_role_00006F92": "Handling subscriptions", "choice.choice_access_rights_by_role_00003033": "Managing user accounts", "content.note_access_rights_by_role_00001A5F": "Note: The Security Administrator role, along with the \"Computers and mobiles - Full editing\" role is required to create additional administrators and assign this role to users within the same organization (will be replaced by the IAM role).
", "content.dd_p_access_rights_by_role_000029AF": "Audit logs entry: epp: manage_servers_only
", "content.dd_p_access_rights_by_role_0000C46F": "or epp_manage_all
", "content.dt_access_rights_by_role_00007F2C": "Read-only", "content.p_access_rights_by_role_0000B75F": "Audit logs entry: epp: manage_computers_mobiles_only
", "content.p_access_rights_by_role_000077BB": "epp: readonly", "content.title_access_rights_by_role_00003502": "Extended Detection and Response – Toggle off", "content.dt_access_rights_by_role_0000DFC8": "No access", "content.dd_access_rights_by_role_00006E65": "", "content.dd_p_access_rights_by_role_000086AB": "No access rights to view Extended Detection and Response (XDR) content across the following areas:
", "choice.choice_access_rights_by_role_0000769B": "Broad Context Detections", "choice.choice_access_rights_by_role_000058A8": "Response actions", "choice.choice_access_rights_by_role_00003EF6": "Automated actions", "choice.choice_access_rights_by_role_00004BF3": "Dashboard content related to Detection and Response", "choice.choice_access_rights_by_role_0000A9F5": "Software Reputation", "choice.choice_access_rights_by_role_000068F3": "Organization Settings related to Detection and Response", "choice.choice_access_rights_by_role_0000CE8A": "Event Search pages", "choice.choice_access_rights_by_role_000018B4": "Elevate to WithSecure", "choice.choice_access_rights_by_role_0000FFA4": "Subscription view", "content.title_access_rights_by_role_0000671D": "Extended Detection and Response – Broad Context Detections", "content.dt_access_rights_by_role_00003D87": "Full editing", "content.dd_access_rights_by_role_00001CF4": "", "content.dd_p_access_rights_by_role_00006D37": "Permission to manage:
", "choice.choice_access_rights_by_role_0000F89A": "Broad Context Detections (for example, change status and close detections)", "choice.choice_access_rights_by_role_00007EC3": "My Reports", "choice.choice_access_rights_by_role_0000FA93": "Detection and Response-related content on the Dashboard", "choice.choice_access_rights_by_role_000095A6": "Software Reputation and Organization Settings related to Detection and Response", "choice.choice_access_rights_by_role_00004A44": "Elevate to WithSecure when applicable", "choice.choice_access_rights_by_role_0000A7EB": "Requests", "content.dd_p_access_rights_by_role_000062CA": "Limited access to:
", "choice.choice_access_rights_by_role_0000C72E": "Devices view", "choice.choice_access_rights_by_role_0000919E": "Cloud view", "choice.choice_access_rights_by_role_000049AB": "Subscription view", "content.dd_p_access_rights_by_role_000051EB": "Issuing Quick Actions requires additional roles, such as Execute Responses.
", "content.note_access_rights_by_role_0000C4BA": "Note: This does not grant permission to configure the Cloud Tenant. Full editing rights under Computers and Mobiles are required for that level of access.
", "content.dd_p_access_rights_by_role_00007806": "Audit logs entry: elements: xdr-incident-full
", "content.dt_access_rights_by_role_0000782D": "Read-only", "content.dd_access_rights_by_role_0000725B": "", "content.dd_p_access_rights_by_role_000008B8": "Default value when Extended Detection and Response (XDR), which allows read-only access to:
", "choice.choice_access_rights_by_role_00008CE1": "Broad Context Detections", "choice.choice_access_rights_by_role_0000FAEF": "My Reports", "choice.choice_access_rights_by_role_0000122C": "Detection and Response-related content on the Dashboard", "choice.choice_access_rights_by_role_0000C711": "Software Reputation", "choice.choice_access_rights_by_role_0000D865": "Organization Settings related to Detection and Response", "choice.choice_access_rights_by_role_00009070": "Elevate to WithSecure when applicable", "choice.choice_access_rights_by_role_000036C2": "Devices", "choice.choice_access_rights_by_role_0000593B": "Cloud views", "choice.choice_access_rights_by_role_00004C6E": "Requests", "content.dd_p_access_rights_by_role_0000FBBF": "Access to the Subscription view is limited.
", "content.dd_p_access_rights_by_role_0000106C": "Audit logs entry: elements: xdr-incident-read
", "content.title_access_rights_by_role_000024EF": "Extended Detection and Response – Response", "content.dt_access_rights_by_role_0000C22B": "Execute responses", "content.dd_access_rights_by_role_0000864D": "", "content.dd_p_access_rights_by_role_00007C0B": "Access to execute:
", "choice.choice_access_rights_by_role_00007FC9": "response actions", "choice.choice_access_rights_by_role_00003BCB": "configure Automated actions", "content.dd_p_access_rights_by_role_00004E1C": "Limited access to Cloud view.
", "content.dd_p_access_rights_by_role_000015E4": "Audit logs entry: elements: xdr-response-full
", "content.dt_access_rights_by_role_00007FB0": "List responses", "content.dd_access_rights_by_role_0000C0CB": "", "content.dd_p_access_rights_by_role_00004B16": "Access to review:
", "choice.choice_access_rights_by_role_0000A056": "executed response actions", "choice.choice_access_rights_by_role_00002414": "respective results available", "content.dd_p_access_rights_by_role_00006D48": "Limited access to:
", "choice.choice_access_rights_by_role_0000DE31": "Devices view", "choice.choice_access_rights_by_role_00000964": "Cloud view", "content.dd_p_access_rights_by_role_000019D6": "Download response results requires the Execute Responses permission.
", "content.dd_p_access_rights_by_role_00000517": "Access to the Subscription view is limited.
", "content.dd_p_access_rights_by_role_0000DB5A": "Audit logs entry: elements: xdr-response-read
", "content.dt_access_rights_by_role_0000FD0C": "No access", "content.dd_access_rights_by_role_000094F0": "", "content.dd_p_access_rights_by_role_00002F09": "No access to execute or review:
", "choice.choice_access_rights_by_role_0000352B": "Response actions", "choice.choice_access_rights_by_role_00006769": "Automated actions", "content.title_access_rights_by_role_00002E1A": "Extended Detection and Response – Event Search", "content.dt_access_rights_by_role_000015D9": "Read-only", "content.p_access_rights_by_role_00003D85": "Access to the Subscription view is limited.
", "content.p_access_rights_by_role_00009F1E": "Audit logs entry: elements: xdr-event-search", "content.dt_access_rights_by_role_0000052B": "No access", "content.dd_access_rights_by_role_0000070D": "No access to review event data.", "content.title_access_rights_by_role_0000E949": "Elements Administration", "content.dt_access_rights_by_role_000007BF": "No access", "content.dd_access_rights_by_role_000009C2": "No rights to create new users or manage other users access rights.", "content.dt_access_rights_by_role_0000B4AC": "Identity and Access Management", "content.dd_access_rights_by_role_000041F7": "Rights to create, delete and manage all Elements users.", "desc": [ "content.title_access_rights_by_role_000022C6", { "dl.dl_access_rights_by_role_000041BF": [ { "dlentry.dlentry_access_rights_by_role_0000966F": [ "content.dt_access_rights_by_role_0000CC85", "content.dd_access_rights_by_role_0000B825", "content.dd_p_access_rights_by_role_000040CB", { "choices.ul_access_rights_by_role_0000FDC3": [ "choice.choice_access_rights_by_role_00006838", "choice.choice_access_rights_by_role_000015FC", "choice.choice_access_rights_by_role_000008BF", "choice.choice_access_rights_by_role_00004E39", "choice.choice_access_rights_by_role_0000DAB4" ] }, "content.note_access_rights_by_role_0000FFDD", "content.dd_p_access_rights_by_role_0000F8A6" ] } ] }, "content.title_access_rights_by_role_00005222", { "dl.dl_access_rights_by_role_00000747": [ { "dlentry.dlentry_access_rights_by_role_0000CE9F": [ "content.dt_access_rights_by_role_00001EA9", "content.dd_access_rights_by_role_00002C3D", "content.dd_p_access_rights_by_role_0000BBF3", "content.note_access_rights_by_role_0000527A", "content.dd_p_access_rights_by_role_0000690F" ] }, { "dlentry.dlentry_access_rights_by_role_0000851B": [ "content.dt_access_rights_by_role_000086E4", "content.dd_access_rights_by_role_0000B8D9" ] }, { "dlentry.dlentry_access_rights_by_role_00005BA7": [ "content.dt_access_rights_by_role_00009E01", "content.dd_access_rights_by_role_0000AD10" ] } ] }, "content.title_access_rights_by_role_0000BE4B", { "dl.dl_access_rights_by_role_00004CCA": [ { "dlentry.dlentry_access_rights_by_role_00007A88": [ "content.dt_access_rights_by_role_0000E69D", "content.dd_access_rights_by_role_0000137D", "content.dd_p_access_rights_by_role_00001187", { "choices.ul_access_rights_by_role_000090CE": [ "choice.choice_access_rights_by_role_00008767", "choice.choice_access_rights_by_role_00002206", "choice.choice_access_rights_by_role_0000E393" ] }, "content.dd_p_access_rights_by_role_0000DB2F" ] }, { "dlentry.dlentry_access_rights_by_role_00009B4C": [ "content.dt_access_rights_by_role_00003A0D", "content.dd_access_rights_by_role_0000CDB4" ] }, { "dlentry.dlentry_access_rights_by_role_00007A32": [ "content.dt_access_rights_by_role_0000CECF", "content.dd_access_rights_by_role_0000EF2F" ] } ] }, "content.title_access_rights_by_role_00003474", { "dl.dl_access_rights_by_role_0000094E": [ { "dlentry.dlentry_access_rights_by_role_0000D39F": [ "content.dt_access_rights_by_role_0000FD21", "content.dd_access_rights_by_role_00007BB5", "content.dd_p_access_rights_by_role_00003119", "content.note_access_rights_by_role_00008B99", "content.dd_p_access_rights_by_role_0000B5C8" ] } ] }, "content.title_access_rights_by_role_0000FDA1", { "dl.dl_access_rights_by_role_00008C2D": [ { "dlentry.dlentry_access_rights_by_role_00000AA0": [ "content.dt_access_rights_by_role_0000872A", "content.dd_access_rights_by_role_0000C7F4", "content.dd_p_access_rights_by_role_00005FBB", { "choices.ul_access_rights_by_role_00005699": [ "choice.choice_access_rights_by_role_0000A698", "choice.choice_access_rights_by_role_0000A6AB", "choice.choice_access_rights_by_role_000049F8", "choice.choice_access_rights_by_role_0000A343", "choice.choice_access_rights_by_role_0000ACDE", "choice.choice_access_rights_by_role_0000DDAE", "choice.choice_access_rights_by_role_0000AF9A", "choice.choice_access_rights_by_role_00008CE7" ] }, "content.note_access_rights_by_role_000076F5" ] } ] }, "content.title_access_rights_by_role_0000BD4D", { "dl.dl_access_rights_by_role_00006FFA": [ { "dlentry.dlentry_access_rights_by_role_00003D96": [ "content.dt_access_rights_by_role_0000DEEF", "content.dd_access_rights_by_role_00008B24", "content.dd_p_access_rights_by_role_000033DE", { "choices.ul_access_rights_by_role_00002A0B": [ "choice.choice_access_rights_by_role_00009E2B", "choice.choice_access_rights_by_role_0000E367", "choice.choice_access_rights_by_role_0000FD81", "choice.choice_access_rights_by_role_0000AF5F", "choice.choice_access_rights_by_role_0000B010", "choice.choice_access_rights_by_role_0000362D" ] }, "content.note_access_rights_by_role_0000F0EF", "content.dd_p_access_rights_by_role_0000341D", "content.dd_p_access_rights_by_role_000038BC" ] }, { "dlentry.dlentry_access_rights_by_role_0000EC5A": [ "content.dt_access_rights_by_role_00009EF6", "content.p_access_rights_by_role_0000B6C7", "content.p_access_rights_by_role_0000A8F2" ] } ] }, "content.title_access_rights_by_role_0000ACC6", { "dl.dl_access_rights_by_role_0000FBF0": [ { "dlentry.dlentry_access_rights_by_role_00000BF7": [ "content.dt_access_rights_by_role_000065A4", "content.dd_access_rights_by_role_0000A885", "content.dd_p_access_rights_by_role_0000B80A", { "choices.ul_access_rights_by_role_00005CDF": [ "choice.choice_access_rights_by_role_00006F98", "choice.choice_access_rights_by_role_00006E4C", "choice.choice_access_rights_by_role_0000FDDC", "choice.choice_access_rights_by_role_00006F92", "choice.choice_access_rights_by_role_00003033" ] }, "content.note_access_rights_by_role_00001A5F", "content.dd_p_access_rights_by_role_000029AF", "content.dd_p_access_rights_by_role_0000C46F" ] }, { "dlentry.dlentry_access_rights_by_role_00008FB4": [ "content.dt_access_rights_by_role_00007F2C", "content.p_access_rights_by_role_0000B75F", "content.p_access_rights_by_role_000077BB" ] } ] }, "content.title_access_rights_by_role_00003502", { "dl.dl_access_rights_by_role_0000CA51": [ { "dlentry.dlentry_access_rights_by_role_00002465": [ "content.dt_access_rights_by_role_0000DFC8", "content.dd_access_rights_by_role_00006E65", "content.dd_p_access_rights_by_role_000086AB", { "choices.ul_access_rights_by_role_000035D7": [ "choice.choice_access_rights_by_role_0000769B", "choice.choice_access_rights_by_role_000058A8", "choice.choice_access_rights_by_role_00003EF6", "choice.choice_access_rights_by_role_00004BF3", "choice.choice_access_rights_by_role_0000A9F5", "choice.choice_access_rights_by_role_000068F3", "choice.choice_access_rights_by_role_0000CE8A", "choice.choice_access_rights_by_role_000018B4", "choice.choice_access_rights_by_role_0000FFA4" ] } ] } ] }, "content.title_access_rights_by_role_0000671D", { "dl.dl_access_rights_by_role_00000AAA": [ { "dlentry.dlentry_access_rights_by_role_000046B6": [ "content.dt_access_rights_by_role_00003D87", "content.dd_access_rights_by_role_00001CF4", "content.dd_p_access_rights_by_role_00006D37", { "choices.ul_access_rights_by_role_0000C9E8": [ "choice.choice_access_rights_by_role_0000F89A", "choice.choice_access_rights_by_role_00007EC3", "choice.choice_access_rights_by_role_0000FA93", "choice.choice_access_rights_by_role_000095A6", "choice.choice_access_rights_by_role_00004A44", "choice.choice_access_rights_by_role_0000A7EB" ] }, "content.dd_p_access_rights_by_role_000062CA", { "choices.ul_access_rights_by_role_00003DB0": [ "choice.choice_access_rights_by_role_0000C72E", "choice.choice_access_rights_by_role_0000919E", "choice.choice_access_rights_by_role_000049AB" ] }, "content.dd_p_access_rights_by_role_000051EB", "content.note_access_rights_by_role_0000C4BA", "content.dd_p_access_rights_by_role_00007806" ] }, { "dlentry.dlentry_access_rights_by_role_00000D06": [ "content.dt_access_rights_by_role_0000782D", "content.dd_access_rights_by_role_0000725B", "content.dd_p_access_rights_by_role_000008B8", { "choices.ul_access_rights_by_role_000064D5": [ "choice.choice_access_rights_by_role_00008CE1", "choice.choice_access_rights_by_role_0000FAEF", "choice.choice_access_rights_by_role_0000122C", "choice.choice_access_rights_by_role_0000C711", "choice.choice_access_rights_by_role_0000D865", "choice.choice_access_rights_by_role_00009070", "choice.choice_access_rights_by_role_000036C2", "choice.choice_access_rights_by_role_0000593B", "choice.choice_access_rights_by_role_00004C6E" ] }, "content.dd_p_access_rights_by_role_0000FBBF", "content.dd_p_access_rights_by_role_0000106C" ] } ] }, "content.title_access_rights_by_role_000024EF", { "dl.dl_access_rights_by_role_000004E8": [ { "dlentry.dlentry_access_rights_by_role_00006DED": [ "content.dt_access_rights_by_role_0000C22B", "content.dd_access_rights_by_role_0000864D", "content.dd_p_access_rights_by_role_00007C0B", { "choices.ul_access_rights_by_role_00009507": [ "choice.choice_access_rights_by_role_00007FC9", "choice.choice_access_rights_by_role_00003BCB" ] }, "content.dd_p_access_rights_by_role_00004E1C", "content.dd_p_access_rights_by_role_000015E4" ] }, { "dlentry.dlentry_access_rights_by_role_00005FA5": [ "content.dt_access_rights_by_role_00007FB0", "content.dd_access_rights_by_role_0000C0CB", "content.dd_p_access_rights_by_role_00004B16", { "choices.ul_access_rights_by_role_00008CC0": [ "choice.choice_access_rights_by_role_0000A056", "choice.choice_access_rights_by_role_00002414" ] }, "content.dd_p_access_rights_by_role_00006D48", { "choices.ul_access_rights_by_role_0000F34C": [ "choice.choice_access_rights_by_role_0000DE31", "choice.choice_access_rights_by_role_00000964" ] }, "content.dd_p_access_rights_by_role_000019D6", "content.dd_p_access_rights_by_role_00000517", "content.dd_p_access_rights_by_role_0000DB5A" ] }, { "dlentry.dlentry_access_rights_by_role_0000F0F7": [ "content.dt_access_rights_by_role_0000FD0C", "content.dd_access_rights_by_role_000094F0", "content.dd_p_access_rights_by_role_00002F09", { "choices.ul_access_rights_by_role_0000F7B0": [ "choice.choice_access_rights_by_role_0000352B", "choice.choice_access_rights_by_role_00006769" ] } ] } ] }, "content.title_access_rights_by_role_00002E1A", { "dl.dl_access_rights_by_role_00005A64": [ { "dlentry.dlentry_access_rights_by_role_0000E976": [ "content.dt_access_rights_by_role_000015D9", "content.p_access_rights_by_role_00003D85", "content.p_access_rights_by_role_00009F1E" ] }, { "dlentry.dlentry_access_rights_by_role_0000BA4D": [ "content.dt_access_rights_by_role_0000052B", "content.dd_access_rights_by_role_0000070D" ] } ] }, "content.title_access_rights_by_role_0000E949", { "dl.dl_access_rights_by_role_0000C9DA": [ { "dlentry.dlentry_access_rights_by_role_0000097D": [ "content.dt_access_rights_by_role_000007BF", "content.dd_access_rights_by_role_000009C2" ] }, { "dlentry.dlentry_access_rights_by_role_000003F2": [ "content.dt_access_rights_by_role_0000B4AC", "content.dd_access_rights_by_role_000041F7" ] } ] } ] }, "using_scope_selector-2-latest-en.json": { "title": "title_using_scope_selector_0000012A7", "title_using_scope_selector_0000012A7": "Move between the managed companies", "shortdesc": "shortdesc_using_scope_selector_00000659D", "shortdesc_using_scope_selector_00000659D": "Use the scope selector to broaden or narrow the scope of information displayed in WithSecure Elements Security Center. ", "content.p_using_scope_selector_00001FB1C": "In Elements Security Center, there are different account levels, which determine the access rights:", "step.step_using_scope_selector_00001A9BB": "Solution Providers (SoPs) manage Service Partners and groups of companies. They can access Elements Security Center to manage security and subscriptions for their directly managed companies, their Service Partners, and their Service Partners' companies.", "step.step_using_scope_selector_00001EBFD": "Service Partners (SePs) manage a group of companies. They can access Elements Security Center to manage security for their directly managed companies.", "step.step_using_scope_selector_0000156F9": "Each company manages a single company. Companies that are managed by a SoP or SeP can request access from their provider, whereas companies that manage their own security can be provided full access to Elements Security Center. Companies that are managed by a SoP or SeP or directly by WithSecure get read-only rights to Elements Security Center.", "content.p_using_scope_selector_00002D82A": "To use the scope selector to focus on a particular company:", "content.p_using_scope_selector_000022B07": "A dropdown menu is displayed, listing all the customer companies associated with your account.
", "step.step_using_scope_selector_000023B15": "Select the icon at the title bar.", "content.p_using_scope_selector_00002CF7A": "The name of the selected company is shown with a blue background color and the page is updated to show the relevant information for the selected company.", "step.step_using_scope_selector_0000261E0": "Select the desired company or write its name in the Search field, and then select Enter.", "desc": [ "content.p_using_scope_selector_00001FB1C", { "steps.ul_using_scope_selector_00001F41C": [ "step.step_using_scope_selector_00001A9BB", "step.step_using_scope_selector_00001EBFD", "step.step_using_scope_selector_0000156F9" ] }, "content.p_using_scope_selector_00002D82A", { "steps.steps_using_scope_selector_000020ACB": [ "step.step_using_scope_selector_000023B15", "content.p_using_scope_selector_000022B07", "step.step_using_scope_selector_0000261E0", "content.p_using_scope_selector_00002CF7A" ] } ] }, "identity_and_access_management_roles-latest-en.json": { "title": "title_iam_roles_000001_4DE26FEB", "title_iam_roles_000001_4DE26FEB": "Elements Identity and Access Management (IAM) role", "shortdesc": "shortdesc_iam_roles_000002_08EC97CA", "shortdesc_iam_roles_000002_08EC97CA": "The Identity and Access Management (IAM) role is authorized to grant and revoke all Elements permissions for security administrators within the IAM administrator's own organization and affiliated entities.", "content.title_iam_roles_000013_879B064C": "Overview", "content.p_iam_roles_000014_43524D14": "The IAM role is a powerful role within WithSecure Elements. It is designed to streamline and enhance the management of security capabilities and services.", "content.p_iam_roles_000016_05844C81": "IAM administrators have the authority to manage security roles within their own organization and affiliated entities. This includes granting and revoking roles for security administrators.", "content.p_iam_roles_000017_9E7D9E59": "As the Elements ecosystem expands, IAM administrators will also manage new capabilities and services, eliminating the need for a cumbersome self-registration process.", "content.p_iam_roles_000019_FAAF7210": "Security administrators access Elements Security Center using WithSecure business accounts. Their access is organized according to specific features, capabilities, and services. The IAM role simplifies the process of assigning roles across different capabilities, which was complex before.", "content.title_iam_roles_00001C_F519DFBA": "Benefits", "content.p_iam_roles_00001D_B0ED07DF": "The IAM role provides several benefits, including the following:", "step.step_iam_roles_00001F_1B15B464": "Streamlined role management across WithSecure Elements", "step.step_iam_roles_000021_E1591C08": "Enhanced security through centralized control", "step.step_iam_roles_000022_AD972C48": "Adapting to future needs with the ability to manage new capabilities and services", "content.title_iam_roles_000023_388F444E": "Claiming the IAM role", "content.p_iam_roles_000024_6EB1C7CF": "For users whose IAM role does not involve an escalation of privilege (i.e., they posses all legacy user access management roles within the organization), the Security Administrators view shows a banner offering them the opportunity to claim the new IAM administrator role. Every organization should carefully consider how they manage IAM-related privileges, as these are distinct from security administrative roles. So, fewer individuals can act as IAM administrators compared to when this option was not available.", "desc": [ "content.title_iam_roles_000013_879B064C", "content.p_iam_roles_000014_43524D14", "content.p_iam_roles_000016_05844C81", "content.p_iam_roles_000017_9E7D9E59", "content.p_iam_roles_000019_FAAF7210", "content.title_iam_roles_00001C_F519DFBA", "content.p_iam_roles_00001D_B0ED07DF", { "steps.ul_iam_roles_00001E_D3C5EECF": [ "step.step_iam_roles_00001F_1B15B464", "step.step_iam_roles_000021_E1591C08", "step.step_iam_roles_000022_AD972C48" ] }, "content.title_iam_roles_000023_388F444E", "content.p_iam_roles_000024_6EB1C7CF" ] }, "elements_iam_role_properties-latest-en.json": { "title": "title_iam_role_properties_000001E7D3", "title_iam_role_properties_000001E7D3": "Elements IAM role properties", "shortdesc": "shortdesc_iam_role_properties_000002BEB3", "shortdesc_iam_role_properties_000002BEB3": "Holders of the IAM role (also known as IAM administrators) can grant or revoke access to any other capability or service-specific role within their organization and its child organizations.", "content.p_iam_role_properties_0000127AD3": "IAM administrators can do the following:", "step.step_iam_role_properties_00001490C5": "Grant themselves any other role, so they gain access to security capabilities or services", "step.step_iam_role_properties_00001537B3": "Grant or revoke new roles introduced by WithSecure for Elements capabilities or services", "step.step_iam_role_properties_000018FF40": "Create or delete WithSecure business accounts by granting or revoking roles.", "step.step_iam_role_properties_00001A0D84": "Transfer IAM permissions to other security administrators within the same organization or its child organizations.", "content.title_iam_role_properties_00001B8C8A": "Acquiring the IAM role", "content.p_iam_role_properties_00001CC61A": "Organizations that manage their own security or provide security capabilities to others must have at least one IAM administrator. The IAM role can be acquired by one of the following ways:", "step.step_iam_role_properties_00001EE6F4": "Being granted the role by another IAM administrator within the same or a parent organization", "step.step_iam_role_properties_00001F1C46": "Self-registration with an Elements subscription issued for the company", "step.step_iam_role_properties_000021A578": "Onboarding by WithSecure for new partners or customer companies", "content.p_iam_role_properties_000023B505": "Existing capability or service-specific roles remain effective but they will eventually be managed through the IAM role. The IAM role will also safeguard access to features that are currently managed by other roles, such as configuring API keys.", "content.title_iam_role_properties_0000244C81": "Migration of IAM permissions", "content.p_iam_role_properties_000025B961": "The migration process aims to transition from legacy, capability-specific IAM roles to the new Elements IAM role, which grants higher privileges. During this process, Elements identifies eligible users and prompts them to claim the new IAM role.", "content.p_iam_role_properties_000028A66B": "Candidates for the IAM role are identified based on their possession of legacy, capability-specific IAM roles and by reviewing active company subscriptions:", "content.dt_iam_role_properties_00002B077C": "For customer companies", "content.dd_iam_role_properties_00002C6271": "Security administrators with the following identified legacy roles:", "choice.choice_iam_role_properties_00002E9B37": "Elements Exposure Management: Full editing", "choice.choice_iam_role_properties_0000302816": "Elements Collaboration Protection: Management administrator", "choice.choice_iam_role_properties_000032998F": "Elements Vulnerability Management: Administrator", "choice.choice_iam_role_properties_000034FB0C": "Elements Endpoint Protection - Computers, servers, and mobiles: Full editing", "content.dt_iam_role_properties_0000377C48": "For Solution Providers and Service Partners", "content.dd_iam_role_properties_00003826AB": "Security administrators with legacy roles for all capabilities and services used by the companies they manage", "content.note_iam_role_properties_00003976D2": "Note: The policy for partners differs from that for customer companies, making sure that only eligible administrators claim the IAM role.", "content.title_iam_role_properties_00003AF30A": "When IAM administrator candidate cannot be identified", "content.p_iam_role_properties_00003BAD2D": "In some organizations, the allocation of legacy, capability-specific roles among security administrators may result in a situation where no single user possesses the same effective access as that granted by the IAM role. This could occur, for example, if a company employs both Elements Endpoint Protection and Elements Collaboration Protection capabilities, but these capabilities are managed independently by two different individuals, with no one person overseeing both at the same time.", "desc": [ "content.p_iam_role_properties_0000127AD3", { "steps.ul_iam_role_properties_00001327A0": [ "step.step_iam_role_properties_00001490C5", "step.step_iam_role_properties_00001537B3", "step.step_iam_role_properties_000018FF40", "step.step_iam_role_properties_00001A0D84" ] }, "content.title_iam_role_properties_00001B8C8A", "content.p_iam_role_properties_00001CC61A", { "steps.ul_iam_role_properties_00001D25CB": [ "step.step_iam_role_properties_00001EE6F4", "step.step_iam_role_properties_00001F1C46", "step.step_iam_role_properties_000021A578" ] }, "content.p_iam_role_properties_000023B505", "content.title_iam_role_properties_0000244C81", "content.p_iam_role_properties_000025B961", "content.p_iam_role_properties_000028A66B", { "dl.dl_iam_role_properties_0000299550": [ { "dlentry.dlentry_iam_role_properties_00002AC0B9": [ "content.dt_iam_role_properties_00002B077C", "content.dd_iam_role_properties_00002C6271", { "choices.ul_iam_role_properties_00002DE08F": [ "choice.choice_iam_role_properties_00002E9B37", "choice.choice_iam_role_properties_0000302816", "choice.choice_iam_role_properties_000032998F", "choice.choice_iam_role_properties_000034FB0C" ] } ] }, { "dlentry.dlentry_iam_role_properties_0000364FDA": [ "content.dt_iam_role_properties_0000377C48", "content.dd_iam_role_properties_00003826AB" ] } ] }, "content.note_iam_role_properties_00003976D2", "content.title_iam_role_properties_00003AF30A", "content.p_iam_role_properties_00003BAD2D" ] }, "add_admin_account_company-latest-en.json": { "title": "title_add_admin_account_compan_0E990", "title_add_admin_account_compan_0E990": "Add a new administrator", "shortdesc": "shortdesc_add_admin_account_compan_0EA86", "shortdesc_add_admin_account_compan_0EA86": "You can provide a designated individual, known as an administrator, with a user account with required rights in WithSecure Elements Security Center. ", "content.p_add_admin_account_compan_0E901": "You can add an administrator for the Solution Provider, Service Partner, or for a company account.", "content.p_add_admin_account_compan_02E3C": "To create an administrator account:", "content.p_add_admin_account_compan_0835D": "The Organization Settings page opens.", "step.step_add_admin_account_compan_0CE76": "Under Management, select Organization Settings on the sidebar.", "content.note_add_admin_account_compan_0A9C9": "Note: You can create an administrator account for either your Elements Security Center account or for a specific customer company", "step.step_add_admin_account_compan_0180E": "Select the Security Administrators tab.", "step.step_add_admin_account_compan_0EE89": "Using the scope selector, select the organization level on which you want to create a new administrator account.", "step.step_add_admin_account_compan_05C29": "Select Add administrator.", "content.note_add_admin_account_compan_0EBD4": "Note: The email address must be a valid one and accessible by an actual account user. Do not use shared accounts.", "substep.substep_add_admin_account_compan_03189": "Enter the email address.", "substep.substep_add_admin_account_compan_0F04E": "Select the desired language for the new administrator.", "step.step_add_admin_account_compan_05C41": "In the Add administrator screen, enter the administrator details:", "step.step_add_admin_account_compan_02638": "Select Next.", "content.note_add_admin_account_compan_044DD": "Note: If the new administrator is not allowed to have a full access in a feature-specific role, leave the default No access option as is.", "step.step_add_admin_account_compan_0132F": "In the Roles screen, select the roles that the new administrator needs to have.", "content.p_add_admin_account_compan_0D4DB": "The Summary screen opens.", "step.step_add_admin_account_compan_0748D": "Select Next.", "step.step_add_admin_account_compan_01B32": "Check that the administrator details the selected roles are correct, and then select Add to complete adding the new administrator.", "content.p_add_admin_account_compan_0CE71": "A new administrator account is created.", "content.note_add_admin_account_compan_025AE": "Note: The user receives an email with instructions on how to set up a password for the new account.", "desc": [ "content.p_add_admin_account_compan_0E901", "content.p_add_admin_account_compan_02E3C", { "steps.steps_add_admin_account_compan_04F44": [ "step.step_add_admin_account_compan_0CE76", "content.p_add_admin_account_compan_0835D", "step.step_add_admin_account_compan_0180E", "content.note_add_admin_account_compan_0A9C9", "step.step_add_admin_account_compan_0EE89", "step.step_add_admin_account_compan_05C29", "step.step_add_admin_account_compan_05C41", { "substeps.substepsalpha_addalpha_adminalpha_accountalpha_companalpha_06F63": [ "substep.substep_add_admin_account_compan_03189", "content.note_add_admin_account_compan_0EBD4", "substep.substep_add_admin_account_compan_0F04E" ] }, "step.step_add_admin_account_compan_02638", "step.step_add_admin_account_compan_0132F", "content.note_add_admin_account_compan_044DD", "step.step_add_admin_account_compan_0748D", "content.p_add_admin_account_compan_0D4DB", "step.step_add_admin_account_compan_01B32" ] }, "content.p_add_admin_account_compan_0CE71", "content.note_add_admin_account_compan_025AE" ] }, "add_sep_account-latest-en.json": { "title": "title_add_sep_account_000001_35A99CA", "title_add_sep_account_000001_35A99CA": "Add a new service partner", "shortdesc": "shortdesc_add_sep_account_000002_8FE5181", "shortdesc_add_sep_account_000002_8FE5181": "Add a service partner account to the managed organization in WithSecure Elements. ", "content.p_add_sep_account_000011_4784EC9": "To create a service partner account:", "content.p_add_sep_account_000017_FB6D122": "The Organization Settings page is displayed.", "step.step_add_sep_account_000013_80FBE82": "Under Management, select Organization Settings on the sidebar.", "step.step_add_sep_account_000019_E1E54B4": "Select the General tab.", "content.p_add_sep_account_000020_700323A": "The Create service partner account view opens.", "step.step_add_sep_account_00001C_78DF4D2": "Select and then select Create service partner account.", "step.step_add_sep_account_000022_E5C2FF1": "Enter a name for the organization account, and select Save.", "content.p_add_sep_account_000025_336B3B8": "The service partner account is created.", "desc": [ "content.p_add_sep_account_000011_4784EC9", { "steps.steps_add_sep_account_000012_EB09F96": [ "step.step_add_sep_account_000013_80FBE82", "content.p_add_sep_account_000017_FB6D122", "step.step_add_sep_account_000019_E1E54B4", "step.step_add_sep_account_00001C_78DF4D2", "content.p_add_sep_account_000020_700323A", "step.step_add_sep_account_000022_E5C2FF1" ] }, "content.p_add_sep_account_000025_336B3B8" ] }, "edit_admin_account-latest-en.json": { "title": "title_edit_admin_account_000001_721F", "title_edit_admin_account_000001_721F": "Edit or remove administrators", "shortdesc": "shortdesc_edit_admin_account_000002_5CE8", "shortdesc_edit_admin_account_000002_5CE8": "You can edit or remove administrators accounts. ", "content.p_edit_admin_account_000011_B5F9": "Edit an administrator's role assignments, or remove their access entirely — removing all roles automatically deletes the account.", "content.p_edit_admin_account_000017_44FB": "The Organization Settings page is displayed.", "step.step_edit_admin_account_000013_58F2": "Under Management, select Organization Settings on the sidebar.", "step.step_edit_admin_account_000019_FDB0": "Select the Security Administrators tab.", "content.p_edit_admin_account_00001F_DE47": "The Summary screen opens.", "step.step_edit_admin_account_00001C_E367": "In the Email column, select the email address of the administrator account that you want to edit or remove.", "substep.substep_edit_admin_account_000024_AAD5": "Make the needed changes to the administrator roles.", "substep.substep_edit_admin_account_000026_CD67": "Select Save.", "content.p_edit_admin_account_000029_9015": "The details of the administrator account are updated.", "step.step_edit_admin_account_000021_CD24": "To edit the details of the administrator account, do the following:", "content.note_edit_admin_account_00002E_EEB1": "Note: When you remove all the access rights from an administrator account, the account is automatically deleted when you save the changes.", "content.p_edit_admin_account_00002F_0B54": "The administrator account is deleted.", "step.step_edit_admin_account_00002A_8611": "To remove the administrator account, select Delete.", "desc": [ "content.p_edit_admin_account_000011_B5F9", { "steps.steps_edit_admin_account_000012_FF92": [ "step.step_edit_admin_account_000013_58F2", "content.p_edit_admin_account_000017_44FB", "step.step_edit_admin_account_000019_FDB0", "step.step_edit_admin_account_00001C_E367", "content.p_edit_admin_account_00001F_DE47", "step.step_edit_admin_account_000021_CD24", { "substeps.substepsalpha_editalpha_adminalpha_accountalpha_000023alpha_7A80": [ "substep.substep_edit_admin_account_000024_AAD5", "substep.substep_edit_admin_account_000026_CD67" ] }, "content.p_edit_admin_account_000029_9015", "step.step_edit_admin_account_00002A_8611", "content.note_edit_admin_account_00002E_EEB1", "content.p_edit_admin_account_00002F_0B54" ] } ] }, "managing_api_clients-latest-en.json": { "title": "title_managing_api_clients_0000002CB", "title_managing_api_clients_0000002CB": "Create an API client", "shortdesc": "shortdesc_managing_api_clients_000006942", "shortdesc_managing_api_clients_000006942": "You can create an API client to let an application use the Elements API with specific access rights.", "content.p_managing_api_clients_00001A365": "An API client provides credentials that let an application use the Elements API. An API client has either full access or is limited to read-only access, depending on whether you select the Read-only option when you create it. For the available API operations, see the Elements API reference.", "content.p_managing_api_clients_0000116B7": "To create an API client:", "content.p_managing_api_clients_000012C8E": "The Organization Settings page opens.", "step.step_managing_api_clients_00001699F": "Under Management, select Organization Settings on the sidebar.", "content.p_managing_api_clients_000029391": "The tab shows the organization's UUID and a list of existing API clients.", "step.step_managing_api_clients_00001C12B": "Select the API Clients tab.", "content.p_managing_api_clients_0000266AE": "The Add new API client dialog opens, starting with the Details step.", "step.step_managing_api_clients_00002CB09": "Select Add new.", "step.step_managing_api_clients_00002055A": "Select the organization for the API client, enter a description, and select Read-only to limit the client to read-only access.", "content.p_managing_api_clients_00002B94E": "The API client step opens, showing the generated client ID and secret.", "step.step_managing_api_clients_0000200BF": "Select Add.", "content.note_managing_api_clients_00003C43C": "Important: You cannot view or access the secret again after this step.", "step.step_managing_api_clients_00003CA09": "Copy the secret and store it in a safe place.", "content.p_managing_api_clients_00003EB1A": "The new API client appears in the list, with its client ID, access rights, and creation date.", "step.step_managing_api_clients_0000364CA": "Select I have copied and stored the secret, and then select Done.", "content.p_managing_api_clients_000033C14": "A new API client is created.", "desc": [ "content.p_managing_api_clients_00001A365", "content.p_managing_api_clients_0000116B7", { "steps.steps_managing_api_clients_0000175C0": [ "step.step_managing_api_clients_00001699F", "content.p_managing_api_clients_000012C8E", "step.step_managing_api_clients_00001C12B", "content.p_managing_api_clients_000029391", "step.step_managing_api_clients_00002CB09", "content.p_managing_api_clients_0000266AE", "step.step_managing_api_clients_00002055A", "step.step_managing_api_clients_0000200BF", "content.p_managing_api_clients_00002B94E", "step.step_managing_api_clients_00003CA09", "content.note_managing_api_clients_00003C43C", "step.step_managing_api_clients_0000364CA", "content.p_managing_api_clients_00003EB1A" ] }, "content.p_managing_api_clients_000033C14" ] }, "deleting_api_client-latest-en.json": { "title": "title_deleting_api_client_000001EC0E", "title_deleting_api_client_000001EC0E": "Delete an API client", "shortdesc": "shortdesc_deleting_api_client_0000021A5D", "shortdesc_deleting_api_client_0000021A5D": "You can delete an API client that an application no longer needs.", "content.p_deleting_api_client_00000F52EC": "When you delete an API client, any application that uses its credentials can no longer access the Elements API with them.", "content.p_deleting_api_client_000011B206": "To delete an API client:", "content.p_deleting_api_client_000017944E": "The Organization Settings page opens.", "step.step_deleting_api_client_000013AEF7": "Under Management, select Organization Settings on the sidebar.", "content.p_deleting_api_client_00001CCB5E": "The tab shows a list of the organization's API clients.", "step.step_deleting_api_client_000019C3C8": "Select the API Clients tab.", "content.p_deleting_api_client_00001FB88A": "The API client is deleted.", "step.step_deleting_api_client_00001DA45D": "In the row of the API client that you want to delete, select the trash icon, and confirm that you want to delete it.", "desc": [ "content.p_deleting_api_client_00000F52EC", "content.p_deleting_api_client_000011B206", { "steps.steps_deleting_api_client_0000125480": [ "step.step_deleting_api_client_000013AEF7", "content.p_deleting_api_client_000017944E", "step.step_deleting_api_client_000019C3C8", "content.p_deleting_api_client_00001CCB5E", "step.step_deleting_api_client_00001DA45D", "content.p_deleting_api_client_00001FB88A" ] } ] }, "recover_password-latest-en.json": { "title": "title_recover_password_000001_8110D1", "title_recover_password_000001_8110D1": "Recover your password", "shortdesc": "shortdesc_recover_password_000002_78DCA8", "shortdesc_recover_password_000002_78DCA8": "If you have forgotten your password, you can recover it through the Forgot password? link. ", "content.p_recover_password_000012_719707": "To recover your password:", "content.p_recover_password_000017_81960B": "The Reset password mail sent window opens.", "step.step_recover_password_000014_833DC0": "On the login page, select the Forgot password? link.", "step.step_recover_password_000018_88A752": "Enter your username or email address.", "step.step_recover_password_00001A_195867": "Select Send.", "content.p_recover_password_00001E_708881": "You will receive an email message with instruction on how to change your password.", "desc": [ "content.p_recover_password_000012_719707", { "steps.steps_recover_password_000013_111ADE": [ "step.step_recover_password_000014_833DC0", "content.p_recover_password_000017_81960B", "step.step_recover_password_000018_88A752", "step.step_recover_password_00001A_195867" ] }, "content.p_recover_password_00001E_708881" ] }, "task_changing_account_details-latest-en.json": { "title": "title_changing_account_details_0BE9E", "title_changing_account_details_0BE9E": "Change your account details", "shortdesc": "shortdesc_changing_account_details_0F3DF", "shortdesc_changing_account_details_0F3DF": "Change your user name in WithSecure Elements Security Center. Federated users manage their account details in their identity provider.", "content.p_changing_account_details_0BBCF": "You can change your user name in WithSecure Elements Security Center from your account settings.", "content.note_changing_account_details_0409B": "Important: If the managed organization uses federated sign-in (Entra ID), you cannot change your account details in WithSecure Elements Security Center. Manage your details in your identity provider instead.", "content.p_changing_account_details_0FF7F": "To change your user name:", "step.step_changing_account_details_01DA2": "Select at the top-right corner, then select My settings.", "step.step_changing_account_details_04AC8": "Under Details, enter a new user name.", "step.step_changing_account_details_0B68C": "Select Save.", "desc": [ "content.p_changing_account_details_0BBCF", "content.note_changing_account_details_0409B", "content.p_changing_account_details_0FF7F", { "steps.steps_changing_account_details_0E817": [ "step.step_changing_account_details_01DA2", "step.step_changing_account_details_04AC8", "step.step_changing_account_details_0B68C" ] } ] }, "about_product_subscriptions-latest-en.json": { "title": "title_about_product_subscripti_0180C", "title_about_product_subscripti_0180C": "Taking Elements products into use", "shortdesc": "shortdesc_about_product_subscripti_0B7F0", "shortdesc_about_product_subscripti_0B7F0": "Taking WithSecure Elements products into use includes a number of steps.", "step.step_about_product_subscripti_041D0": "Adding a customer company, if not yet added.", "content.note_about_product_subscripti_0518F": "Note: Under Management > Subscriptions, you can view all your products, your available subscription keys, and when they expire.", "step.step_about_product_subscripti_054A3": "Getting a subscription.", "step.step_about_product_subscripti_04044": "Adding the subscription to the customer company.", "content.note_about_product_subscripti_098BB": "Note: You can find instructions for deploying Elements products in Common deployment methods.", "step.step_about_product_subscripti_0378F": "Deploying the product.", "desc": [ { "steps.ol_about_product_subscripti_0514C": [ "step.step_about_product_subscripti_041D0", "step.step_about_product_subscripti_054A3", "content.note_about_product_subscripti_0518F", "step.step_about_product_subscripti_04044", "step.step_about_product_subscripti_0378F", "content.note_about_product_subscripti_098BB" ] } ] }, "managing_company-latest-en.json": { "title": "title_managing_company_000001_924807", "title_managing_company_000001_924807": "Adding a customer company", "shortdesc": "shortdesc_managing_company_000002_300935", "shortdesc_managing_company_000002_300935": "To add a new customer company to your WithSecure Elements Security Center account, you must first add it as a new customer to your WithSecure Partner Portal account and purchase at least one WithSecure Elements product for it. ", "content.note_managing_company_000017_4D0B6B": "Note: Only Solution Provider and Service Partner users can add customer companies.", "content.p_managing_company_000018_B355F4": "If you need an administrator to manage the subscriptions and devices in the new customer company, create an administrator account through Elements Security Center.", "content.note_managing_company_00001B_FED8A7": "Note: The WithSecure Partner Portal is an online service that works with Elements Security Center. It provides tools, materials and an integrated eOrdering system to help with sales and support of WithSecure solutions.", "content.p_managing_company_000021_D5CF30": "The purchase order for the new customer must first be added successfully from your Partner Portal account. Once this happens, the customer is automatically added as a new company to your Elements Security Center account.", "content.p_managing_company_000023_B219F6": "You can then begin offering WithSecure Elements products to users in the customer company, as well as managing the subscriptions for purchased products.", "desc": [ "content.note_managing_company_000017_4D0B6B", "content.p_managing_company_000018_B355F4", "content.note_managing_company_00001B_FED8A7", "content.p_managing_company_000021_D5CF30", "content.p_managing_company_000023_B219F6" ], "related": [ "add_admin_account_company-latest-en" ] }, "adding_subscription_key-latest-en.json": { "title": "title_adding_subscription_key_00BE66", "title_adding_subscription_key_00BE66": "Assign a subscription key for a customer company", "shortdesc": "shortdesc_adding_subscription_key_003186", "shortdesc_adding_subscription_key_003186": "By assigning a subscription key for a company, you can add more computers to WithSecure Elements Security Center. ", "content.p_adding_subscription_key_002855": "You need to consider the following:", "step.step_adding_subscription_key_0011F4": "Solution Providers and Service Partners can assign subscription keys for their customer companies.", "step.step_adding_subscription_key_00B15C": "Company users can assign unused subscription keys that are provided by their partner to their own organizations.", "step.step_adding_subscription_key_002A62": "Users must be granted a full editing role in the Endpoint Protection software (applies to both computers and servers).", "content.note_adding_subscription_key_006860": "Note: Company users must request for a subscription key from their partner.", "step.step_adding_subscription_key_008A17": "The subscription must be allocated at a partner level (the subscription key must exist). The partner can find the subscription key in the Subscriptions view under Management on the sidebar.", "content.p_adding_subscription_key_004256": "To assign a subscription key:", "step.step_adding_subscription_key_00CD36": "Under Management, select Subscriptions on the sidebar.", "content.p_adding_subscription_key_00DD03": "A table opens listing the current subscriptions of the selected company.", "step.step_adding_subscription_key_006B7F": "Using the scope selector, select the company to which you want to assign the subscription key.", "content.p_adding_subscription_key_008F2A": "The Assign subscription page opens.", "step.step_adding_subscription_key_002B41": "Select Assign subscription above the filters.", "step.step_adding_subscription_key_003CD2": "Enter the new subscription key for the company, and select OK.", "content.p_adding_subscription_key_00978D": "The new subscription key is added to the company account.", "desc": [ "content.p_adding_subscription_key_002855", { "steps.ul_adding_subscription_key_0030B7": [ "step.step_adding_subscription_key_0011F4", "step.step_adding_subscription_key_00B15C", "step.step_adding_subscription_key_002A62", "step.step_adding_subscription_key_008A17", "content.note_adding_subscription_key_006860" ] }, "content.p_adding_subscription_key_004256", { "steps.steps_adding_subscription_key_00B3F3": [ "step.step_adding_subscription_key_00CD36", "step.step_adding_subscription_key_006B7F", "content.p_adding_subscription_key_00DD03", "step.step_adding_subscription_key_002B41", "content.p_adding_subscription_key_008F2A", "step.step_adding_subscription_key_003CD2" ] }, "content.p_adding_subscription_key_00978D" ] }, "adding_company-latest-en.json": { "title": "title_adding_company_000001_B5EE73A4", "title_adding_company_000001_B5EE73A4": "Order products for a new customer company", "shortdesc": "shortdesc_adding_company_000002_7662FF53", "shortdesc_adding_company_000002_7662FF53": "Order WithSecure Elements products for a new customer company via WithSecure Partner Portal.", "content.note_adding_company_000014_59A01709": "Note: Only Solution Providers and Service Partners can order products for customer companies.", "content.p_adding_company_000015_1747D459": "To order WithSecure Elements products for a new customer company via WithSecure Partner Portal:", "content.note_adding_company_00001D_5BA2C18B": "Note: WithSecure Partner Portal requires separate login credentials from WithSecure Elements Security Center. If you do not yet have your login details, complete the Request Credentials form on the page and click Send. Allow up to 24 hours to receive your access credentials.", "content.p_adding_company_000022_4341A6EF": "The eOrdering page is displayed.", "step.step_adding_company_000019_B1D326CD": "Log in to the portal by opening the following link in your web browser: Partner Portal", "step.step_adding_company_000024_82597FFC": "On the main page, select New Order.", "content.p_adding_company_00002A_A82E8737": "The New Customer window opens.", "step.step_adding_company_000027_1198EC87": "Enter the name of the new customer company and select Add New.", "step.step_adding_company_00002C_35A08307": "Enter the customer details and select Save.", "step.step_adding_company_00002F_8BF9FE38": "Under New Order, enter a reference number for your order.", "step.step_adding_company_000032_15B2320F": "Under Order Products, select Add Products.", "step.step_adding_company_000036_67170DCE": "Select the required products and follow the ordering instructions.", "content.p_adding_company_000038_90B14D85": "Once your purchase order is completed, the new customer company is listed in your Partner Portal account, together with the purchased products.", "content.note_adding_company_00003A_D48CA417": "Note: It might take a while for the new customer company to show in your Elements Security Center account.", "desc": [ "content.note_adding_company_000014_59A01709", "content.p_adding_company_000015_1747D459", { "steps.steps_adding_company_000018_23CFA850": [ "step.step_adding_company_000019_B1D326CD", "content.note_adding_company_00001D_5BA2C18B", "content.p_adding_company_000022_4341A6EF", "step.step_adding_company_000024_82597FFC", "step.step_adding_company_000027_1198EC87", "content.p_adding_company_00002A_A82E8737", "step.step_adding_company_00002C_35A08307", "step.step_adding_company_00002F_8BF9FE38", "step.step_adding_company_000032_15B2320F", "step.step_adding_company_000036_67170DCE" ] }, "content.p_adding_company_000038_90B14D85", "content.note_adding_company_00003A_D48CA417" ] }, "viewing_subscriptions-latest-en.json": { "title": "title_viewing_subscriptions_00005E99", "title_viewing_subscriptions_00005E99": "View available product subscriptions", "shortdesc": "shortdesc_viewing_subscriptions_000080BE", "shortdesc_viewing_subscriptions_000080BE": "To view the available subscriptions: ", "content.p_viewing_subscriptions_0000D664": "The Subscriptions view lists every product subscription for the scope you're viewing, along with keys, status, and expiration, so you can find and manage them across managed organizations.", "content.p_viewing_subscriptions_000057A1": "The Subscriptions view opens showing the subscriptions for each product, the subscriptions keys, and the organizations to which the subscriptions belong.", "content.note_viewing_subscriptions_0000D3E7": "Note: If the scope selector is set to display all the customer companies, by default, you see all the subscriptions.", "step.step_viewing_subscriptions_0000D774": "Under Management, select Subscriptions.", "cell.choptionhd_viewing_subscriptions_00000C73": "Option", "cell.chdeschd_viewing_subscriptions_0000AD4E": "Description", "cell.choption_viewing_subscriptions_000088C3": "Subscription key", "cell.chdesc_viewing_subscriptions_000092D8": "enter the relevant subscription key", "cell.choption_viewing_subscriptions_0000408E": "Product", "cell.chdesc_viewing_subscriptions_00002010": "select from a list of available products", "cell.choption_viewing_subscriptions_0000DF1D": "Expiration", "cell.chdesc_viewing_subscriptions_00006995": "select Valid to see valid subscriptions; Expiring in 14 days or Expiring in 60 days to see subscriptions that are expiring soon; or Expired to see only subscriptions that have expired", "cell.choption_viewing_subscriptions_0000C180": "Type", "cell.chdesc_viewing_subscriptions_00003E48": "you can select from the following subscription types: Commercial, Evaluation, Governmental, Educational, or Not For Resale.", "content.p_viewing_subscriptions_00003728": "To see the subscriptions for a specific customer company, use the scope selector and select the company that you wish to view.", "content.note_viewing_subscriptions_0000CE43": "Note: When you select to view a specific customer company, no filters are used.", "step.step_viewing_subscriptions_0000E59D": "You can use filtering to find the following:", "desc": [ "content.p_viewing_subscriptions_0000D664", { "steps.steps_viewing_subscriptions_00009D64": [ "step.step_viewing_subscriptions_0000D774", "content.p_viewing_subscriptions_000057A1", "content.note_viewing_subscriptions_0000D3E7", "step.step_viewing_subscriptions_0000E59D", { "table.table_viewing_subscriptions_0000AE4F": [ { "thead.chhead_viewing_subscriptions_0000CC67": [ "cell.choptionhd_viewing_subscriptions_00000C73", "cell.chdeschd_viewing_subscriptions_0000AD4E" ] }, { "row.chrow_viewing_subscriptions_00007122": [ "cell.choption_viewing_subscriptions_000088C3", "cell.chdesc_viewing_subscriptions_000092D8" ] }, { "row.chrow_viewing_subscriptions_0000FA6F": [ "cell.choption_viewing_subscriptions_0000408E", "cell.chdesc_viewing_subscriptions_00002010" ] }, { "row.chrow_viewing_subscriptions_000011DA": [ "cell.choption_viewing_subscriptions_0000DF1D", "cell.chdesc_viewing_subscriptions_00006995" ] }, { "row.chrow_viewing_subscriptions_00000AC6": [ "cell.choption_viewing_subscriptions_0000C180", "cell.chdesc_viewing_subscriptions_00003E48" ] } ] }, "content.p_viewing_subscriptions_00003728", "content.note_viewing_subscriptions_0000CE43" ] } ] }, "changing_subscription_key-latest-en.json": { "title": "title_changing_subscription_ke_061FD", "title_changing_subscription_ke_061FD": "Change the subscription key", "shortdesc": "shortdesc_changing_subscription_ke_0C3FC", "shortdesc_changing_subscription_ke_0C3FC": "Changes the subscription key for one or more devices in WithSecure Elements Security Center. ", "content.p_changing_subscription_ke_0BD38": "To change the subscription key:", "content.note_changing_subscription_ke_09E04": "Note: A subscription key cannot be changed for Elements Connector or any EPP subscription variant if the change would require downgrading to a subscription that does not include EPP.", "content.p_changing_subscription_ke_06AA1": "The Devices page opens.", "step.step_changing_subscription_ke_04FC1": "Under Environment, select Devices on the sidebar.", "content.p_changing_subscription_ke_0AEEC": "A menu is displayed at the bottom of the page.", "step.step_changing_subscription_ke_09E1E": "Select the devices for which you want to change the subscription key.", "step.step_changing_subscription_ke_018DD": "Select Change subscription.", "content.note_changing_subscription_ke_0C499": "Note: Under Management > Subscriptions, you can find the available subscription keys for the devices of the selected company.", "content.p_changing_subscription_ke_00358": "The new subscription key is applied to the selected devices.", "step.step_changing_subscription_ke_0508E": "Enter a new subscription key in the field that appears, and select Change subscription.", "desc": [ "content.p_changing_subscription_ke_0BD38", "content.note_changing_subscription_ke_09E04", { "steps.steps_changing_subscription_ke_03EF4": [ "step.step_changing_subscription_ke_04FC1", "content.p_changing_subscription_ke_06AA1", "step.step_changing_subscription_ke_09E1E", "content.p_changing_subscription_ke_0AEEC", "step.step_changing_subscription_ke_018DD", "step.step_changing_subscription_ke_0508E", "content.note_changing_subscription_ke_0C499", "content.p_changing_subscription_ke_00358" ] } ] }, "upgrade-latest-en.json": { "title": "title_upgrade_000001_10BB61D8", "title_upgrade_000001_10BB61D8": "Upgrading your subscriptions", "shortdesc": "shortdesc_upgrade_000002_C22E0742", "shortdesc_upgrade_000002_C22E0742": "Options for upgrading your WithSecure Elements subscriptions. ", "content.p_upgrade_000010_EA8DDDAD": "This chapter describes how to upgrade your WithSecure Elements subscriptions and the upgrade options that are available.", "desc": [ "content.p_upgrade_000010_EA8DDDAD" ] }, "upgrading_options-latest-en.json": { "title": "title_upgrading_options_000001_2C4C0", "title_upgrading_options_000001_2C4C0": "Upgrading your subscriptions", "shortdesc": "shortdesc_upgrading_options_000002_9F8FA", "shortdesc_upgrading_options_000002_9F8FA": "You can upgrade your subscription in two ways: ", "step.step_upgrading_options_00001A_5C4D4": "By changing the type of your subscription key (ordering a new one)", "step.step_upgrading_options_00001B_B8AF9": "By changing to another subscription key on your device", "content.p_upgrading_options_00001C_52830": "You have the following options in upgrading your subscriptions:", "step.step_upgrading_options_00001E_59FD1": "WithSecure Elements EPP for Computers to WithSecure Elements EPP for Computers Premium", "step.step_upgrading_options_000021_456DB": "WithSecure Elements EPP for Computers to WithSecure Elements EDR and EPP for Computers", "step.step_upgrading_options_000024_DBECB": "WithSecure Elements EPP for Computers to WithSecure Elements EDR and EPP for Computers Premium", "step.step_upgrading_options_000027_1CFD4": "WithSecure Elements EPP for Computers Premium to WithSecure Elements EDR and EPP for Computers Premium", "step.step_upgrading_options_00002A_51D6E": "WithSecure Elements EDR and EPP for Computers to WithSecure Elements EDR and EPP for Computers Premium", "step.step_upgrading_options_00002D_FBA2C": "WithSecure Elements EPP for Servers to WithSecure Elements EPP for Servers Premium", "step.step_upgrading_options_000030_305B8": "WithSecure Elements EPP for Servers Premium to WithSecure Elements EDR and EPP for Servers Premium", "content.note_upgrading_options_000033_48F60": "Note: You can use the same installer file for both Standard and Premium versions of WithSecure Elements EPP for Computers or WithSecure Elements EPP for Servers and any combination of WithSecure Elements EDR and EPP for Computers or WithSecure Elements EDR and EPP for Servers.", "content.p_upgrading_options_000038_D91F6": "If WithSecure Elements EDR is installed on a Windows computer, you need to reinstall it before you can upgrade to WithSecure Elements EDR for Computers or WithSecure Elements EDR for Computers Premium.", "desc": [ { "steps.ul_upgrading_options_000019_96530": [ "step.step_upgrading_options_00001A_5C4D4", "step.step_upgrading_options_00001B_B8AF9" ] }, "content.p_upgrading_options_00001C_52830", { "steps.ul_upgrading_options_00001D_44726": [ "step.step_upgrading_options_00001E_59FD1", "step.step_upgrading_options_000021_456DB", "step.step_upgrading_options_000024_DBECB", "step.step_upgrading_options_000027_1CFD4", "step.step_upgrading_options_00002A_51D6E", "step.step_upgrading_options_00002D_FBA2C", "step.step_upgrading_options_000030_305B8" ] }, "content.note_upgrading_options_000033_48F60", "content.p_upgrading_options_000038_D91F6" ] }, "concept_about_security_services-latest-en.json": { "title": "title_about_security_services_0011C0", "title_about_security_services_0011C0": "Security services overview", "shortdesc": "shortdesc_about_security_services_00801F", "shortdesc_about_security_services_00801F": "The Security services page shows which WithSecure services the managed organization already uses and which ones you can still add.", "content.p_about_security_services_00C146": "The Security services page is available under Management > Security services. It brings together the WithSecure services connected to the managed organization and the WithSecure services that the managed organization has not yet added.", "content.dt_about_security_services_004A48": "My WithSecure services", "content.dd_about_security_services_006709": "Lists the WithSecure services that the managed organization already uses.", "content.dt_about_security_services_00A91B": "Available WithSecure services", "content.dd_about_security_services_00AB72": "Lists the WithSecure services that the managed organization can still add.", "content.p_about_security_services_001164": "The Available WithSecure services section groups services by category, including Co-Security and Attack Surface Management. The Co-Security category includes:", "content.dt_about_security_services_00D392": "Infinite", "content.dd_about_security_services_0076D6": "Infinite bundles the full range of WithSecure solutions and services: continuous threat exposure management (CTEM), endpoint protection, detection and response (XDR), managed detection and response (MDR), full WithSecure Elements platform access, customer success management (CSM), and an incident response retainer.", "content.dt_about_security_services_001ACB": "MDR for Endpoints", "content.dd_about_security_services_00078C": "WithSecure Elements Managed Detection and Response is a continuous, 24/7 managed detection and response service. WithSecure security experts investigate and remediate attacks using data collected by WithSecure Elements Endpoint Detection and Response. MDR customers get priority access to the Incident Response service.", "content.dt_about_security_services_0034C9": "MDR for Identities (Entra ID)", "content.dd_about_security_services_006EBF": "WithSecure Elements Identity Security is an identity threat detection and response (ITDR) solution. It protects against identity-based attacks, including attacks on Microsoft Entra ID single sign-on (SSO), by detecting potentially compromised Entra ID identities and enabling a quick response.", "content.dt_about_security_services_00B999": "Elevate", "content.dd_about_security_services_003646": "Elevate is a threat analysis service available to WithSecure Elements Endpoint Detection and Response users. WithSecure experts validate and investigate difficult detections and provide remediation guidance when needed.", "content.dt_about_security_services_00A35F": "Incident Readiness and Response", "content.dd_about_security_services_00EF42": "Incident readiness helps you prepare for a cyber attack by assessing your current level of readiness and setting goals for improvement. Incident response investigates an incident, determines its root cause, and executes a containment strategy that limits the attacker's ability to retaliate or cause further damage.", "content.dt_about_security_services_0065AB": "Digital Forensics and Incident Response", "content.dd_about_security_services_00C37E": "WithSecure Elements DFIR Retainer provides 24/7, SLA-backed access to Digital Forensics and Incident Response specialists for the duration of the contract. When an incident occurs, the DFIR team ensures business continuity through rapid triage, evidence preservation, containment, and remediation guidance. The service is accredited by the UK National Cyber Security Centre (NCSC) and the German Federal Office for Information Security (BSI), and supports compliance with NIS2, GDPR, and DORA.", "desc": [ "content.p_about_security_services_00C146", { "dl.dl_about_security_services_009C21": [ { "dlentry.dlentry_about_security_services_00A14E": [ "content.dt_about_security_services_004A48", "content.dd_about_security_services_006709" ] }, { "dlentry.dlentry_about_security_services_004F28": [ "content.dt_about_security_services_00A91B", "content.dd_about_security_services_00AB72" ] } ] }, "content.p_about_security_services_001164", { "dl.dl_about_security_services_00E65A": [ { "dlentry.dlentry_about_security_services_006683": [ "content.dt_about_security_services_00D392", "content.dd_about_security_services_0076D6" ] }, { "dlentry.dlentry_about_security_services_00DF93": [ "content.dt_about_security_services_001ACB", "content.dd_about_security_services_00078C" ] }, { "dlentry.dlentry_about_security_services_0073F7": [ "content.dt_about_security_services_0034C9", "content.dd_about_security_services_006EBF" ] }, { "dlentry.dlentry_about_security_services_0054C5": [ "content.dt_about_security_services_00B999", "content.dd_about_security_services_003646" ] }, { "dlentry.dlentry_about_security_services_00EA61": [ "content.dt_about_security_services_00A35F", "content.dd_about_security_services_00EF42" ] }, { "dlentry.dlentry_about_security_services_001C6D": [ "content.dt_about_security_services_0065AB", "content.dd_about_security_services_00C37E" ] } ] } ] }, "add_managing_devices_company-latest-en.json": { "title": "title_add_managing_devices_com_080D2", "title_add_managing_devices_com_080D2": "Adding devices for management", "shortdesc": "shortdesc_add_managing_devices_com_05B8C", "shortdesc_add_managing_devices_com_05B8C": "To monitor and manage the security of a computer or mobile device by using your WithSecure Elements account, you must first install an Endpoint Protection software on the computer or mobile device. ", "content.p_add_managing_devices_com_09F26": "Once the software is installed, the device will be added to your WithSecure Elements Security Center account. Through Elements Security Center, you can follow the performance of the security product, as well as manage its subscription, updates and other standard tasks.", "content.note_add_managing_devices_com_05D73": "Note: When you add a new device, the default profile is applied to it.", "content.p_add_managing_devices_com_0FA8B": "There are several ways in which you can install the Endpoint Protection software on the device that you wish to manage:", "step.step_add_managing_devices_com_06958": "Send to the device user an email with a link to the software installer and instructions on how to install and activate it.", "content.note_add_managing_devices_com_09BC5": "Note: This does not apply to WithSecure Elements Mobile Protection.", "step.step_add_managing_devices_com_097C3": "Download the software directly from Elements Security Center and transfer it to the device.", "step.step_add_managing_devices_com_000F3": "Deploy the software through GPO, images, or RMM or MDM tools.", "content.p_add_managing_devices_com_0CF35": "You can add several mobile devices at one go by importing a CSV file containing the required details for each device.", "content.note_add_managing_devices_com_05345": "Note: Before you can add a new device, you must have a subscription for an Endpoint Protection software with at least one free installation available. The number of free installations available to a company will determine the number of devices you can add to it.", "desc": [ "content.p_add_managing_devices_com_09F26", "content.note_add_managing_devices_com_05D73", "content.p_add_managing_devices_com_0FA8B", { "steps.ul_add_managing_devices_com_03644": [ "step.step_add_managing_devices_com_06958", "step.step_add_managing_devices_com_097C3", "content.note_add_managing_devices_com_09BC5", "step.step_add_managing_devices_com_000F3" ] }, "content.p_add_managing_devices_com_0CF35", "content.note_add_managing_devices_com_05345" ] }, "adding_devices-latest-en.json": { "title": "title_adding_devices_000001_2A77A8FD", "title_adding_devices_000001_2A77A8FD": "Distributing WithSecure software", "shortdesc": "shortdesc_adding_devices_000002_1E3116C2", "shortdesc_adding_devices_000002_1E3116C2": "Ways to distribute WithSecure Elements Endpoint Protection software to your devices.", "subchoice.choice_adding_devices_000018_75C69421": "WithSecure Elements EPP for Computers (Windows and Mac)", "subchoice.choice_adding_devices_000019_3832C9AF": "WithSecure Elements EDR and EPP for Computers (Windows and Mac)", "content.note_adding_devices_00001B_D9B88F20": "Note: When installing the software as a standalone, you must add an additional command-line parameter '--skip-sidegrade' to turn off automatic uninstallation of the existing Endpoint Protection software.", "subchoice.choice_adding_devices_00001A_4BA5B3B6": "WithSecure Elements EDR for Computers (Windows, Mac, and Linux)", "subchoice.choice_adding_devices_00001D_55CFD5E7": "WithSecure Elements EPP for Computers Premium (Windows only)", "subchoice.choice_adding_devices_00001E_F46CFF42": "WithSecure Elements EDR and EPP for Computers Premium (Windows only)", "subchoice.choice_adding_devices_00001F_E79DADA8": "WithSecure Elements Exposure Management (Windows only)", "step.step_adding_devices_000015_1E25A3DE": "You can install the following software using the same WithSecure Elements Agent for Computers installation package. The subscription key determines which software is installed:", "subchoice.choice_adding_devices_000025_A5ECB8D8": "WithSecure Elements EPP for Servers (Windows and Linux)", "subchoice.choice_adding_devices_000026_04340A67": "WithSecure Elements EDR for Servers (Windows only)", "subchoice.choice_adding_devices_000027_2F01EE5A": "WithSecure Elements EPP for Servers Premium (Windows only)", "subchoice.choice_adding_devices_000028_541EEE62": "WithSecure Elements EDR and EPP for Servers Premium (Windows and Linux)", "subchoice.choice_adding_devices_000029_EF8464B4": "WithSecure Elements Exposure Management (Windows only)", "step.step_adding_devices_000022_673E60D0": "You can install the following software using the same WithSecure Elements Agent for Servers installation package. The subscription key determines which software is installed:", "content.note_adding_devices_000032_5887A75A": "Note: With all the Elements software (except for the Elements Connector), you can add devices by selecting the Add new device option and then choosing to send either one invitation or importing data from a CSV file to send multiple invitations.", "subchoice.choice_adding_devices_00002F_06DFDE8E": "By sending an installation email via the WithSecure Elements EPP portal using the Add new device.", "subchoice.choice_adding_devices_000035_730CFBED": "By sending an installation email via a third-party MDM software.", "step.step_adding_devices_00002C_D16DCDAB": "You can install WithSecure Elements Mobile Protection in two ways:", "step.step_adding_devices_000037_94B1AABA": "For installing WithSecure Elements Connector, see instructions at WithSecure Elements Connector documentation.", "desc": [ { "steps.ul_adding_devices_000014_0193D12B": [ "step.step_adding_devices_000015_1E25A3DE", { "subchoices.ul_adding_devices_000017_8DC4EBC4": [ "subchoice.choice_adding_devices_000018_75C69421", "subchoice.choice_adding_devices_000019_3832C9AF", "subchoice.choice_adding_devices_00001A_4BA5B3B6", "content.note_adding_devices_00001B_D9B88F20", "subchoice.choice_adding_devices_00001D_55CFD5E7", "subchoice.choice_adding_devices_00001E_F46CFF42", "subchoice.choice_adding_devices_00001F_E79DADA8" ] } ] }, { "steps.ul_adding_devices_000021_81AEB82E": [ "step.step_adding_devices_000022_673E60D0", { "subchoices.ul_adding_devices_000024_C22A84D2": [ "subchoice.choice_adding_devices_000025_A5ECB8D8", "subchoice.choice_adding_devices_000026_04340A67", "subchoice.choice_adding_devices_000027_2F01EE5A", "subchoice.choice_adding_devices_000028_541EEE62", "subchoice.choice_adding_devices_000029_EF8464B4" ] } ] }, { "steps.ul_adding_devices_00002B_A43F4FAD": [ "step.step_adding_devices_00002C_D16DCDAB", { "subchoices.ul_adding_devices_00002E_A5D5C538": [ "subchoice.choice_adding_devices_00002F_06DFDE8E", "content.note_adding_devices_000032_5887A75A", "subchoice.choice_adding_devices_000035_730CFBED" ] } ] }, { "steps.ul_adding_devices_000036_A0DC51A7": [ "step.step_adding_devices_000037_94B1AABA" ] } ] }, "download_software-latest-en.json": { "title": "title_download_software_000001_62F01", "title_download_software_000001_62F01": "Download software from Elements Security Center", "shortdesc": "shortdesc_download_software_000002_11683", "shortdesc_download_software_000002_11683": "You can download WithSecure software installation packages through WithSecure Elements Security Center. ", "content.p_download_software_000014_8264C": "To download the software:", "step.step_download_software_000016_22FC8": "Log in to Elements Security Center.", "content.p_download_software_00001C_DEC4A": "The Downloads page opens.", "step.step_download_software_000019_76A9F": "Select Downloads on the sidebar.", "step.step_download_software_00001E_976B4": "Locate the section for your device type, for example WithSecure Elements Agent for Computers or WithSecure Elements Agent for Servers.", "subchoice.choice_download_software_000026_78974": "Windows: Download .exe or Download .msi", "subchoice.choice_download_software_000029_2222F": "Mac: Download .mpkg", "subchoice.choice_download_software_00002B_0D2F1": "Linux: Download amd64 or Download arm64", "content.p_download_software_000024_A1A21": "The available buttons depend on the operating system:", "content.p_download_software_00002E_F0838": "The software is downloaded. The subscription key associated with your account is embedded in the installer.", "step.step_download_software_000022_49DD1": "Select the download button for your operating system.", "content.p_download_software_00002F_AB884": "Once the desired software has been downloaded, you can transfer and install it on the computer or mobile device you wish to manage. The subscription key is embedded in the product.", "content.note_download_software_000031_90A6A": "Important: Do not use a subscription key for \"WithSecure Elements EDR only\" in devices that have the WithSecure Elements EDR for Computers or vice versa. It may break the software, which you then need to manually remove.", "content.p_download_software_000034_E877D": "After downloading the software, you need to deploy it.", "desc": [ "content.p_download_software_000014_8264C", { "steps.steps_download_software_000015_D7001": [ "step.step_download_software_000016_22FC8", "step.step_download_software_000019_76A9F", "content.p_download_software_00001C_DEC4A", "step.step_download_software_00001E_976B4", "step.step_download_software_000022_49DD1", "content.p_download_software_000024_A1A21", { "subchoices.ul_download_software_000025_498C8": [ "subchoice.choice_download_software_000026_78974", "subchoice.choice_download_software_000029_2222F", "subchoice.choice_download_software_00002B_0D2F1" ] }, "content.p_download_software_00002E_F0838" ] }, "content.p_download_software_00002F_AB884", "content.note_download_software_000031_90A6A", "content.p_download_software_000034_E877D" ] }, "manage_automatic_deletion-latest-en.json": { "title": "title_manage_automatic_deletio_07E0E", "title_manage_automatic_deletio_07E0E": "Manage automatic deletion of devices", "shortdesc": "shortdesc_manage_automatic_deletio_02A85", "shortdesc_manage_automatic_deletio_02A85": "You can select to automatically delete devices that have been offline for a set number of days. ", "content.note_manage_automatic_deletio_02D7A": "Note: This feature does not apply to mobile devices.", "content.note_manage_automatic_deletio_0363E": "Note: You can set the automatic removal of devices only on the Company level.", "content.p_manage_automatic_deletio_000B4": "You can define the period that a device needs to be offline before it will be deleted. If a deleted device becomes active, it is shown again in Elements Security Center if there are free seats in the subscription. If the subscription is full, the device is not shown in Elements Security Center and is not protected.", "content.p_manage_automatic_deletio_0100A": "To turn on automatic deletion of devices:", "content.p_manage_automatic_deletio_0018E": "The Devices page opens.", "step.step_manage_automatic_deletio_00E95": "Under Environment, select Devices on the sidebar.", "content.p_manage_automatic_deletio_076DB": "A menu is displayed.", "step.step_manage_automatic_deletio_05E3B": "Select next to Devices.", "content.p_manage_automatic_deletio_04D73": "The Manage automatic deletion page opens.", "step.step_manage_automatic_deletio_0BC2B": "From the menu, select Manage automatic deletion.", "step.step_manage_automatic_deletio_09E08": "Turn on Automatically delete devices....", "content.note_manage_automatic_deletio_02745": "Note: The minimum number of days is seven (7).", "step.step_manage_automatic_deletio_0C906": "In the box, enter the number of days for a device to be offline before it is deleted.", "content.note_manage_automatic_deletio_07C35": "Important: If a removed device resumes its activity after being removed, it is automatically added back to your subscription, if your subscription has free space. However, if your subscription is full, the device is not returned to the subscription and is left without protection.", "step.step_manage_automatic_deletio_0F1B7": "Select Save.", "desc": [ "content.note_manage_automatic_deletio_02D7A", "content.note_manage_automatic_deletio_0363E", "content.p_manage_automatic_deletio_000B4", "content.p_manage_automatic_deletio_0100A", { "steps.steps_manage_automatic_deletio_0B43D": [ "step.step_manage_automatic_deletio_00E95", "content.p_manage_automatic_deletio_0018E", "step.step_manage_automatic_deletio_05E3B", "content.p_manage_automatic_deletio_076DB", "step.step_manage_automatic_deletio_0BC2B", "content.p_manage_automatic_deletio_04D73", "step.step_manage_automatic_deletio_09E08", "step.step_manage_automatic_deletio_0C906", "content.note_manage_automatic_deletio_02745", "step.step_manage_automatic_deletio_0F1B7", "content.note_manage_automatic_deletio_07C35" ] } ] }, "managing_invites-latest-en.json": { "title": "title_managing_invites_000001_9B5398", "title_managing_invites_000001_9B5398": "Manage invitations", "shortdesc": "shortdesc_managing_invites_000002_58745A", "shortdesc_managing_invites_000002_58745A": "You can send an email with an installation link that allows the recipient to install the app on one device. ", "content.p_managing_invites_000011_562F7C": "To manage the invitations:", "content.p_managing_invites_000017_4B6F22": "The Devices page is displayed.", "step.step_managing_invites_000013_A73120": "Under Environment, select Devices on the sidebar.", "content.p_managing_invites_00001D_7E0B01": "The Manage device invitations page opens. The Pending tab lists those email invitations that include an installation link that has not been used yet. The Expired tab lists the expired email invitations.", "step.step_managing_invites_000019_E2EBD2": "Select Manage device invitations.", "step.step_managing_invites_000022_9D6DD6": "For the pending invitations, you can send a reminder by selecting Send reminder as long as the installation link is valid (for 30 days). After that the invitations are shown under the Expired tab.", "content.note_managing_invites_000029_272F25": "Note: If there are devices that are no longer needed, for example, the user has left the company, you can delete the expired invitations from the table by selecting Delete pending.", "step.step_managing_invites_000025_2B10EB": "For the expired invitations, you can send another invitation link by selecting Send new invitation.", "desc": [ "content.p_managing_invites_000011_562F7C", { "steps.steps_managing_invites_000012_595BB5": [ "step.step_managing_invites_000013_A73120", "content.p_managing_invites_000017_4B6F22", "step.step_managing_invites_000019_E2EBD2", "content.p_managing_invites_00001D_7E0B01", "step.step_managing_invites_000022_9D6DD6", "step.step_managing_invites_000025_2B10EB", "content.note_managing_invites_000029_272F25" ] } ] }, "enhancing_device_management_with_custom_labels-latest-en.json": { "title": "title_enhancing_device_managem_088EA", "title_enhancing_device_managem_088EA": "Enhancing device management with custom labels", "shortdesc": "shortdesc_enhancing_device_managem_09D40", "shortdesc_enhancing_device_managem_09D40": "Create and apply labels to group devices by criteria that you choose.", "content.p_enhancing_device_managem_01C29": "Adding labels allows you to group devices in any way that you prefer. They are commonly used to provide information about the region, operating system, owner, department, workstation vs. server, or any other criteria that suit your needs.", "content.p_enhancing_device_managem_0B3AF": "Labels help analysts by providing more context and they make it easier for you to manage devices within Elements Security Center.", "desc": [ "content.p_enhancing_device_managem_01C29", "content.p_enhancing_device_managem_0B3AF" ] }, "adding_device_labels-latest-en.json": { "title": "title_adding_device_labels_0000031A5", "title_adding_device_labels_0000031A5": "Add device labels", "shortdesc": "shortdesc_adding_device_labels_0000069DE", "shortdesc_adding_device_labels_0000069DE": "You can add device labels in three different ways.", "content.p_adding_device_labels_00001C2CE": "You can add device labels in the following ways.", "content.note_adding_device_labels_00001966F": "Note: In the command line, labels are called tags.", "subchoice.choice_adding_device_labels_00001479C": "Manually in the Device view: select the devices on the Device list view, or open a single device on the Device details view, then on the Actions panel select Manage labels > Add labels, select an existing label or add a new one, and select Add.", "subchoice.choice_adding_device_labels_00002D25D": "Using label-assignment rules in the Profiles section: in Elements Security Center, go to Security Configurations > Profiles > Profile assignment rules, and add labels to an Outbreak rule or Profile assignment rule so that the labels are applied automatically whenever the rule matches.", "subchoice.choice_adding_device_labels_00002779E": "During the Elements agent installation process: assign installation tags as you deploy the agent. See step 2 in Assigning a default profile and installation tags for details.", "step.step_adding_device_labels_00001BD31": "Add device labels in one of the following ways:", "desc": [ "content.p_adding_device_labels_00001C2CE", "content.note_adding_device_labels_00001966F", { "steps.steps_adding_device_labels_00001C3F9": [ "step.step_adding_device_labels_00001BD31", { "subchoices.choices_adding_device_labels_00001A57B": [ "subchoice.choice_adding_device_labels_00001479C", "subchoice.choice_adding_device_labels_00002D25D", "subchoice.choice_adding_device_labels_00002779E" ] } ] } ] }, "manage_devices_in_portal-latest-en.json": { "title": "title_manage_devices_in_portal_08053", "title_manage_devices_in_portal_08053": "Managing devices in Elements Security Center", "shortdesc": "shortdesc_manage_devices_in_portal_04D55", "shortdesc_manage_devices_in_portal_04D55": "How to manage the selected devices in WithSecure Elements Security Center ", "content.p_manage_devices_in_portal_0D2BB": "You can manage your devices in WithSecure Elements Security Center in several ways:", "step.step_manage_devices_in_portal_06E56": "Organize them into asset groups", "step.step_manage_devices_in_portal_06113": "View and customize the device list", "step.step_manage_devices_in_portal_08640": "Automatically delete inactive computers", "step.step_manage_devices_in_portal_0DDD1": "Request diagnostics", "desc": [ "content.p_manage_devices_in_portal_0D2BB", { "steps.ul_manage_devices_in_portal_0F492": [ "step.step_manage_devices_in_portal_06E56", "step.step_manage_devices_in_portal_06113", "step.step_manage_devices_in_portal_08640", "step.step_manage_devices_in_portal_0DDD1" ] } ] }, "managing_asset_groups-latest-en.json": { "title": "title_managing_asset_groups_0000FB1C", "title_managing_asset_groups_0000FB1C": "Managing asset groups", "shortdesc": "shortdesc_managing_asset_groups_00005A3E", "shortdesc_managing_asset_groups_00005A3E": "Asset groups provide a structured way to manage devices within an organization. ", "content.p_managing_asset_groups_000099F3": "You can assign devices to asset groups in two ways:", "step.step_managing_asset_groups_000014EC": "Manual assignment - assign devices to management groups from the Devices page.", "content.note_managing_asset_groups_00005C0C": "Note: A single rule can assign a device to multiple groups.", "step.step_managing_asset_groups_00004B4B": "Automatic assignment - assign devices to groups based on profile assignment rules.", "content.p_managing_asset_groups_0000EB64": "Once devices are organized into groups, you can do the following:", "step.step_managing_asset_groups_0000E711": "Filter devices by group", "step.step_managing_asset_groups_0000F49C": "Filter security events associated with a specific group", "step.step_managing_asset_groups_0000598B": "List software updates for devices within each group", "content.p_managing_asset_groups_00006330": "By using asset groups, you can enhance device visibility, streamline security event management, and prepare for advanced access control mechanisms in an organization.", "desc": [ "content.p_managing_asset_groups_000099F3", { "steps.ul_managing_asset_groups_00008981": [ "step.step_managing_asset_groups_000014EC", "step.step_managing_asset_groups_00004B4B", "content.note_managing_asset_groups_00005C0C" ] }, "content.p_managing_asset_groups_0000EB64", { "steps.ul_managing_asset_groups_0000B19C": [ "step.step_managing_asset_groups_0000E711", "step.step_managing_asset_groups_0000F49C", "step.step_managing_asset_groups_0000598B" ] }, "content.p_managing_asset_groups_00006330" ] }, "creating_asset_groups-latest-en.json": { "title": "title_creating_asset_groups_0000371A", "title_creating_asset_groups_0000371A": "Create asset groups", "shortdesc": "shortdesc_creating_asset_groups_000032E8", "shortdesc_creating_asset_groups_000032E8": "Creates an asset group at the company level.", "content.p_creating_asset_groups_00007796": "Asset groups can only be created on company level. For example, as a partner, you must first select a company from the scope selector or from the list in the General tab under Management > Organization Settings.", "step.step_creating_asset_groups_0000A205": "Under Management, select Organization Settings > General.", "content.p_creating_asset_groups_0000B651": "The Create asset group pane opens.", "step.step_creating_asset_groups_0000D989": "Select Create asset group.", "step.step_creating_asset_groups_00008213": "Enter a name for the asset group.", "step.step_creating_asset_groups_00001DCB": "(Optional) In the Description box, enter a description for the asset group.", "step.step_creating_asset_groups_00006C1E": "Select Save.", "content.p_creating_asset_groups_0000F464": "Next, go to the Devices page to add devices to the new asset group.", "desc": [ "content.p_creating_asset_groups_00007796", { "steps.steps_creating_asset_groups_00006594": [ "step.step_creating_asset_groups_0000A205", "step.step_creating_asset_groups_0000D989", "content.p_creating_asset_groups_0000B651", "step.step_creating_asset_groups_00008213", "step.step_creating_asset_groups_00001DCB", "step.step_creating_asset_groups_00006C1E" ] }, "content.p_creating_asset_groups_0000F464" ] }, "adding_devices_asset_groups-latest-en.json": { "title": "title_adding_devices_to_asset__0AB0F", "title_adding_devices_to_asset__0AB0F": "Add devices to asset groups", "shortdesc": "shortdesc_adding_devices_to_asset__03916", "shortdesc_adding_devices_to_asset__03916": "Adds devices to one or more asset groups.", "content.p_adding_devices_to_asset__0400C": "Asset groups organize devices so you can target scans, scheduling, and reporting at them.", "step.step_adding_devices_to_asset__0C82A": "Under Environment, select Devices.", "step.step_adding_devices_to_asset__05B1D": "In the Devices page, select the devices that you want to add to one or more asset groups.", "step.step_adding_devices_to_asset__076C6": "From the action menu at the bottom of the page, select Manage asset groups > Assign to asset groups.", "step.step_adding_devices_to_asset__01483": "From the drop-down menu, select one or more asset groups to which you want to add the selected devices.", "step.step_adding_devices_to_asset__02604": "Select Assign.", "desc": [ "content.p_adding_devices_to_asset__0400C", { "steps.steps_adding_devices_to_asset__00577": [ "step.step_adding_devices_to_asset__0C82A", "step.step_adding_devices_to_asset__05B1D", "step.step_adding_devices_to_asset__076C6", "step.step_adding_devices_to_asset__01483", "step.step_adding_devices_to_asset__02604" ] } ] }, "managing_devices-latest-en.json": { "title": "title_managing_devices_000001_3E7C63", "title_managing_devices_000001_3E7C63": "Remotely manage a device", "shortdesc": "shortdesc_managing_devices_000002_D29A90", "shortdesc_managing_devices_000002_D29A90": "To send a command to a selected device or manage it via WithSecure Elements Security Center: ", "content.p_managing_devices_000016_1A28A8": "To remotely manage a device:", "content.p_managing_devices_00001C_561387": "The Devices page is displayed.", "step.step_managing_devices_000018_2DD10C": "Under Environment, select Devices on the sidebar.", "subchoice.choice_managing_devices_000021_28A09B": "Computers - shows devices with WithSecure Elements EPP for Computers and WithSecure Elements EPP for Servers", "subchoice.choice_managing_devices_000025_CA436D": "Mobile devices - shows devices with WithSecure Elements Mobile Protection", "subchoice.choice_managing_devices_000028_198B5C": "Connectors - shows devices with WithSecure Elements Connector", "subchoice.choice_managing_devices_00002B_FA2315": "Unmanaged devices - shows devices in a customer Active Directory (not in EPP)", "step.step_managing_devices_00001E_58BAD7": "Select one of the following tabs:", "content.p_managing_devices_00002F_2EEAA4": "A menu is displayed at the bottom of the page.", "step.step_managing_devices_00002D_B16D87": "Select the checkbox next to the name of the device.", "content.note_managing_devices_000033_522DB0": "Note: You can find operations also on the device details page. Some of the operations are shown only there.", "content.p_managing_devices_000035_923091": "The instruction is sent to the selected device.", "step.step_managing_devices_000030_B7A3A3": "Select the desired operation from the menu.", "desc": [ "content.p_managing_devices_000016_1A28A8", { "steps.steps_managing_devices_000017_465ACD": [ "step.step_managing_devices_000018_2DD10C", "content.p_managing_devices_00001C_561387", "step.step_managing_devices_00001E_58BAD7", { "subchoices.choices_managing_devices_000020_9051EB": [ "subchoice.choice_managing_devices_000021_28A09B", "subchoice.choice_managing_devices_000025_CA436D", "subchoice.choice_managing_devices_000028_198B5C", "subchoice.choice_managing_devices_00002B_FA2315" ] }, "step.step_managing_devices_00002D_B16D87", "content.p_managing_devices_00002F_2EEAA4", "step.step_managing_devices_000030_B7A3A3", "content.note_managing_devices_000033_522DB0", "content.p_managing_devices_000035_923091" ] } ] }, "automatically_deleting_computers-latest-en.json": { "title": "title_automatically_deleting_c_0EFD8", "title_automatically_deleting_c_0EFD8": "Automatically delete devices", "shortdesc": "shortdesc_automatically_deleting_c_0A9EB", "shortdesc_automatically_deleting_c_0A9EB": "You can set WithSecure Elements Security Center to automatically delete devices that have been offline for a set number of days. ", "content.note_automatically_deleting_c_01E26": "Note: This feature does not apply to mobile devices.", "content.note_automatically_deleting_c_01763": "Note: You can set the automatic removal of devices only on the Company level.", "content.p_automatically_deleting_c_01062": "To manage automatic deletion:", "content.p_automatically_deleting_c_07BD7": "The Devices page opens.", "step.step_automatically_deleting_c_0BDD6": "Under Environment, select Devices on the sidebar.", "content.p_automatically_deleting_c_04481": "A menu is displayed.", "step.step_automatically_deleting_c_0B781": "Select next to Devices.", "content.p_automatically_deleting_c_0BEEA": "The Manage automatic deletion page opens.", "step.step_automatically_deleting_c_0F492": "Select Manage automatic deletion.", "step.step_automatically_deleting_c_04D86": "Turn on the Automatically delete device... option.", "content.note_automatically_deleting_c_08AA5": "Note: The minimum number of days is seven (7).", "step.step_automatically_deleting_c_0D72A": "In the box, enter the number of days for a device to be offline before it is deleted.", "content.note_automatically_deleting_c_0E766": "Important: If a removed device resumes its activity after being removed, it is automatically added back to your subscription, if your subscription has free space. However, if your subscription is full, the device is not returned to the subscription and is left without protection.", "step.step_automatically_deleting_c_042BC": "Select Save.", "content.p_automatically_deleting_c_0753E": "Devices that stay offline for the specified number of days are deleted automatically.", "desc": [ "content.note_automatically_deleting_c_01E26", "content.note_automatically_deleting_c_01763", "content.p_automatically_deleting_c_01062", { "steps.steps_automatically_deleting_c_07B3F": [ "step.step_automatically_deleting_c_0BDD6", "content.p_automatically_deleting_c_07BD7", "step.step_automatically_deleting_c_0B781", "content.p_automatically_deleting_c_04481", "step.step_automatically_deleting_c_0F492", "content.p_automatically_deleting_c_0BEEA", "step.step_automatically_deleting_c_04D86", "step.step_automatically_deleting_c_0D72A", "content.note_automatically_deleting_c_08AA5", "step.step_automatically_deleting_c_042BC", "content.note_automatically_deleting_c_0E766" ] }, "content.p_automatically_deleting_c_0753E" ] }, "viewing_devices_ad-latest-en.json": { "title": "title_viewing_devices_ad_000001_DF91", "title_viewing_devices_ad_000001_DF91": "View devices based on the Active Directory structure", "shortdesc": "shortdesc_viewing_devices_ad_000002_CFD2", "shortdesc_viewing_devices_ad_000002_CFD2": "You can filter devices based on the Active Directory structure of a company. ", "content.p_viewing_devices_ad_000014_1A6D": "You can use this feature to assign a different profile for the devices in different Active Directory groups, for example, to be used in different sites.", "content.p_viewing_devices_ad_000015_280D": "To view devices based on the Active Directory structure:", "content.p_viewing_devices_ad_00001B_1AB5": "The Devices page is displayed.", "step.step_viewing_devices_ad_000017_25E8": "Under Environment, select Devices on the sidebar.", "content.p_viewing_devices_ad_000020_AE51": "A drop-down menu is displayed, listing all the customer companies associated with your account.", "step.step_viewing_devices_ad_00001D_CDA9": "Select the icon at the top-left corner.", "step.step_viewing_devices_ad_000021_AA2C": "Select the desired company.", "content.note_viewing_devices_ad_000028_56DA": "Note: The drop-down menu is shown only if the company has devices belonging to an Active Directory group.", "content.p_viewing_devices_ad_000029_72CC": "A drop-down menu shows the Active Directory structure of the selected company.", "step.step_viewing_devices_ad_000023_E476": "Then, select the icon next to All devices.", "content.note_viewing_devices_ad_00002D_9116": "Note: The Active Directory structure is built based on the data that is reported by company computers, so it may not be complete. A new Active Directory domain does not show in WithSecure Elements Security Center until WithSecure Elements EPP for Computers or WithSecure Elements EPP for Servers is activated in the computers in that domain.", "step.step_viewing_devices_ad_00002A_3C96": "Select the desired Active Directory group to view all the devices in that group.", "desc": [ "content.p_viewing_devices_ad_000014_1A6D", "content.p_viewing_devices_ad_000015_280D", { "steps.steps_viewing_devices_ad_000016_E92D": [ "step.step_viewing_devices_ad_000017_25E8", "content.p_viewing_devices_ad_00001B_1AB5", "step.step_viewing_devices_ad_00001D_CDA9", "content.p_viewing_devices_ad_000020_AE51", "step.step_viewing_devices_ad_000021_AA2C", "step.step_viewing_devices_ad_000023_E476", "content.note_viewing_devices_ad_000028_56DA", "content.p_viewing_devices_ad_000029_72CC", "step.step_viewing_devices_ad_00002A_3C96", "content.note_viewing_devices_ad_00002D_9116" ] } ] }, "customizing_devices_view-latest-en.json": { "title": "title_customizing_devices_view_0B962", "title_customizing_devices_view_0B962": "Customize the Devices view", "shortdesc": "shortdesc_customizing_devices_view_0DD16", "shortdesc_customizing_devices_view_0DD16": "You can apply filters and you can select which columns you want to be visible in the Devices table. ", "content.p_customizing_devices_view_08C62": "To customize the Devices view:", "content.p_customizing_devices_view_07C2F": "The Devices page is displayed.", "step.step_customizing_devices_view_089A6": "Under Environment, select Devices on the sidebar.", "content.note_customizing_devices_view_08032": "Note: You can remove all the filters by selecting Clear all filters.", "content.p_customizing_devices_view_00CE8": "A list of the devices that match the filtering criteria that you selected is shown.", "step.step_customizing_devices_view_0D84F": "Above the table, from the drop-down menu, select the name of a column for filtering the devices and the desired value for the selected column.", "content.p_customizing_devices_view_0B2A6": "A drop-down menu opens showing the Visible columns list.", "step.step_customizing_devices_view_02481": "At the right corner above the table, select .", "content.p_customizing_devices_view_0617A": "The columns that you selected appear in the table.", "step.step_customizing_devices_view_01E27": "Select the columns that you want to be visible in the table.", "substep.substep_customizing_devices_view_040E1": "Point to the name of a column that you want to move.", "substep.substep_customizing_devices_view_0CDFA": "Depending on where you want the column to appear, drag it up or down in the list.", "step.step_customizing_devices_view_0CD85": "To change the order of the columns in the table:", "substep.substep_customizing_devices_view_0641E": "At the right corner above the table, select .", "substep.substep_customizing_devices_view_03519": "From the drop-down menu, select the desired number of rows.", "content.p_customizing_devices_view_0757C": "The number of rows changes according to your selection.", "step.step_customizing_devices_view_00ACA": "To define the number of rows shown in the table per page, do the following:", "step.step_customizing_devices_view_0DAC3": "If there are more devices than can be shown in the table per page, use the navigation arrows (, ) located above the table to go to the previous or next page.", "content.note_customizing_devices_view_03FFD": "Note: You can remove the views that you have customized by first selecting Delete views, then in the Delete views window selecting the view that you want to remove, and then selecting Delete.", "step.step_customizing_devices_view_070B4": "Select View: > Save as at the top-right corner to save the view that you have customized.", "desc": [ "content.p_customizing_devices_view_08C62", { "steps.steps_customizing_devices_view_09980": [ "step.step_customizing_devices_view_089A6", "content.p_customizing_devices_view_07C2F", "step.step_customizing_devices_view_0D84F", "content.note_customizing_devices_view_08032", "content.p_customizing_devices_view_00CE8", "step.step_customizing_devices_view_02481", "content.p_customizing_devices_view_0B2A6", "step.step_customizing_devices_view_01E27", "content.p_customizing_devices_view_0617A", "step.step_customizing_devices_view_0CD85", { "substeps.substepsalpha_customizingalpha_devicesalpha_viewalpha_051BF": [ "substep.substep_customizing_devices_view_040E1", "substep.substep_customizing_devices_view_0CDFA" ] }, "step.step_customizing_devices_view_00ACA", { "substeps.substepsalpha_customizingalpha_devicesalpha_viewalpha_0A9C9": [ "substep.substep_customizing_devices_view_0641E", "substep.substep_customizing_devices_view_03519" ] }, "content.p_customizing_devices_view_0757C", "step.step_customizing_devices_view_0DAC3", "step.step_customizing_devices_view_070B4", "content.note_customizing_devices_view_03FFD" ] } ] }, "request_diagnostics-latest-en.json": { "title": "title_request_diagnostics_000001C353", "title_request_diagnostics_000001C353": "Request diagnostic data", "shortdesc": "shortdesc_request_diagnostics_000002F991", "shortdesc_request_diagnostics_000002F991": "You can remotely request for a diagnostic file to be uploaded to a WithSecure support team. ", "content.p_request_diagnostics_000016A1ED": "If there is an issue with a device in your managed accounts, the WithSecure Elements Security Center administrator can select the device and make a request to the customer, who allows a diagnostics (WSDIAG) file to be collected and uploaded to WithSecure Elements Security Center. The diagnostics file helps determine the issue and its root cause.", "content.note_request_diagnostics_0000191DD1": "Note: This functionality is available for Elements Agent for Windows - on both servers and workstations - as well as for Elements Mobile Protection.", "content.p_request_diagnostics_00001C56B6": "To request diagnostic data:", "step.step_request_diagnostics_00001E712E": "Log in to Elements Security Center.", "step.step_request_diagnostics_000021D545": "If you are managing multiple accounts, go to the relevant customer account.", "content.p_request_diagnostics_00002826B3": "This opens up a page with device details.", "step.step_request_diagnostics_000023D711": "Once in the correct account, under Environment, select Devices, and select the link for the relevant device (the device that has the issue and for which the wsdiag file is needed).", "content.note_request_diagnostics_000030FD5D": "Note: To check that the request has been sent to the user, in the customer account, go to Environment > Devices and select the three dots icon on the right side and select Manage operations. Verify whether a WSDIAG operation appears in the list with the status Waiting for delivery to the device.", "step.step_request_diagnostics_0000294E43": "On the Actions panel at the bottom of the page, select Request diagnostic file > Request . For privacy purposes, a notification appears for the end user; this does not appear on the server side.", "step.step_request_diagnostics_000036641B": "Make sure that the user allows the diagnostic (WSDIAG) file to be collected. To do this, they must select Allow once they see the notification on their device.", "step.step_request_diagnostics_0000399920": "When the user has allowed the diagnostic (WSDIAG) file to be collected, go back to the Manage operations page in the customer account.", "step.step_request_diagnostics_00003CD10B": "Check if the status has changed to Success, operation was performed.", "step.step_request_diagnostics_00003FDDDE": "On the Manage operations page, get the reference number for the created WSDIAG file.", "content.note_request_diagnostics_0000460C90": "Note: In the support ticket, WithSecure can see the reference number and download the file for further investigation.", "step.step_request_diagnostics_0000422C8D": "Include the reference number in the support ticket to WithSecure Support.", "content.note_request_diagnostics_00004CFA11": "Note: The WSDIAG file is automatically deleted after two weeks from the portal.", "step.step_request_diagnostics_000048821D": "Optionally, download the diagnostic file by selecting the three dots icon in the Action column.", "desc": [ "content.p_request_diagnostics_000016A1ED", "content.note_request_diagnostics_0000191DD1", "content.p_request_diagnostics_00001C56B6", { "steps.steps_request_diagnostics_00001D3D53": [ "step.step_request_diagnostics_00001E712E", "step.step_request_diagnostics_000021D545", "step.step_request_diagnostics_000023D711", "content.p_request_diagnostics_00002826B3", "step.step_request_diagnostics_0000294E43", "content.note_request_diagnostics_000030FD5D", "step.step_request_diagnostics_000036641B", "step.step_request_diagnostics_0000399920", "step.step_request_diagnostics_00003CD10B", "step.step_request_diagnostics_00003FDDDE", "step.step_request_diagnostics_0000422C8D", "content.note_request_diagnostics_0000460C90", "step.step_request_diagnostics_000048821D", "content.note_request_diagnostics_00004CFA11" ] } ] }, "elements_data_recovery-latest-en.json": { "title": "title_elements_data_recovery_000A213", "title_elements_data_recovery_000A213": "Elements data recovery", "shortdesc": "shortdesc_elements_data_recovery_000BA17", "shortdesc_elements_data_recovery_000BA17": "WithSecure maintains the availability of the Elements service and takes care of the necessary backups and any needed recovery actions. ", "content.p_elements_data_recovery_000BD6E": "No actions are required from you.", "content.note_elements_data_recovery_0006C44": "Important: This backup includes only data that is directly relevant to the service provided by WithSecure. It is your responsibility to backup your own documents and other data.", "desc": [ "content.p_elements_data_recovery_000BD6E", "content.note_elements_data_recovery_0006C44" ] }, "interacting_with_withsecure_services-latest-en.json": { "title": "title_interacting_with_withsec_0233C", "title_interacting_with_withsec_0233C": "Interacting with WithSecure Services", "shortdesc": "shortdesc_interacting_with_withsec_092FD", "shortdesc_interacting_with_withsec_092FD": "WithSecure services for validating suspicious samples and reporting ransomware or other active threats.", "content.p_interacting_with_withsec_0D17C": "Use these services to submit files, URLs, and email samples to WithSecure for validation, and to report ransomware or active threats where no detection was observed.", "desc": [ "content.p_interacting_with_withsec_0D17C" ] }, "concept_samplevalidation-latest-en.json": { "title": "title_withsecure_sample_valida_0D616", "title_withsecure_sample_valida_0D616": "WithSecure Sample Validation", "shortdesc": "shortdesc_withsecure_sample_valida_058DD", "shortdesc_withsecure_sample_valida_058DD": "WithSecure? Sample Validation improves threat detection by reviewing samples, correcting false results, and finding gaps.", "content.p_withsecure_sample_valida_0779C": "WithSecure? Sample Validation was formerly called Submit a Sample. This topic describes the service, its features, and planned updates.", "content.p_withsecure_sample_valida_051ED": "WithSecure Sample Validation is a cybersecurity service in the Elements Security Center. WithSecure malware experts use proprietary cloud technology to deliver the service. The service provides accurate and consistent detection across all vectors and improves continuously.", "content.p_withsecure_sample_valida_06745": "Sample Validation improves detection performance by:", "step.step_withsecure_sample_valida_0727F": "Correcting false positives and false negatives.", "step.step_withsecure_sample_valida_01EC8": "Finding detection gaps.", "step.step_withsecure_sample_valida_0B8C5": "Improving security posture.", "step.step_withsecure_sample_valida_0553E": "Combining expert human review with malware analysis and threat research.", "content.p_withsecure_sample_valida_0179F": "Automation, cloud intelligence, and analyst expertise help organizations understand emerging threats. They make detection, containment, and remediation more precise. These processes also become faster and more reliable.", "desc": [ "content.p_withsecure_sample_valida_0779C", "content.p_withsecure_sample_valida_051ED", "content.p_withsecure_sample_valida_06745", { "steps.ul_withsecure_sample_valida_0E3DD": [ "step.step_withsecure_sample_valida_0727F", "step.step_withsecure_sample_valida_01EC8", "step.step_withsecure_sample_valida_0B8C5", "step.step_withsecure_sample_valida_0553E" ] }, "content.p_withsecure_sample_valida_0179F" ] }, "service_offering-latest-en.json": { "title": "title_service_offering_000001_AA2589", "title_service_offering_000001_AA2589": "Service Offering", "shortdesc": "shortdesc_service_offering_000002_CD1060", "shortdesc_service_offering_000002_CD1060": "The WithSecure? Sample Validation service is available to all customers using our solutions, official engines, or APIs. It covers any situation where a file, URL, email, or behavior is incorrectly flagged - or not flagged - by WithSecure components.", "content.p_service_offering_000013_7BEE8B": "You can submit requests related to:", "step.step_service_offering_000015_3D40BB": "Incorrect detections (false positives)", "step.step_service_offering_000016_1B34DD": "Missing detections (false negatives)", "step.step_service_offering_000017_8B03FE": "URL categorization", "step.step_service_offering_000018_1C0880": "Phishing and spam classification issues", "step.step_service_offering_000019_DF052E": "Allowlisting of safe applications or processes", "content.p_service_offering_00001A_E84A8F": "This capability is included as part of WithSecure Support, ensuring all customers have access to detection-quality improvements at no additional cost.", "desc": [ "content.p_service_offering_000013_7BEE8B", { "steps.ul_service_offering_000014_57DD98": [ "step.step_service_offering_000015_3D40BB", "step.step_service_offering_000016_1B34DD", "step.step_service_offering_000017_8B03FE", "step.step_service_offering_000018_1C0880", "step.step_service_offering_000019_DF052E" ] }, "content.p_service_offering_00001A_E84A8F" ] }, "false_detections-latest-en.json": { "title": "title_false_detections_000001_FF04E5", "title_false_detections_000001_FF04E5": "False Detections (Incorrectly Detected)", "shortdesc": "shortdesc_false_detections_000002_08F154", "shortdesc_false_detections_000002_08F154": "These issues occur when legitimate content is incorrectly identified as malicious or unwanted.", "content.title_false_detections_000012_F3BDAC": "False detection issue types", "cell.entry_false_detections_00001A_5FA2B5": "Issue Type", "cell.entry_false_detections_00001B_C97A0B": "Reason", "cell.entry_false_detections_00001C_543230": "Descriptions", "cell.entry_false_detections_00001D_E6365E": "Plan Type", "cell.entry_false_detections_000020_BFF86D": "File-based False Positives", "cell.entry_false_detections_000021_DDAE3D": "FP - Clean file was blocked", "cell.entry_false_detections_000022_81076E": "A safe file that's mistakenly flagged as harmful or infected by WithSecure solutions.", "cell.entry_false_detections_000024_C18F66": "Included in Support", "cell.entry_false_detections_000026_A0D39A": "PUAs", "cell.entry_false_detections_000027_F972C7": "PUA - Potentially unwanted application detected", "cell.entry_false_detections_000028_7504FD": "A program that isn't exactly malware but may perform actions you didn't expect - like showing ads, changing settings, or slowing your system down.", "cell.entry_false_detections_000029_5E07BB": "Included in Support", "cell.entry_false_detections_00002B_43A886": "URL-based False Positives", "cell.entry_false_detections_00002C_5EEF49": "FP - Trusted URL blocked", "cell.entry_false_detections_00002D_803246": "A safe website or web link that's incorrectly marked as dangerous or blocked by WithSecure solutions.", "cell.entry_false_detections_00002F_DE8CE7": "Included in Support", "cell.entry_false_detections_000031_CA1C83": "URL Categorization", "cell.entry_false_detections_000032_6B60A9": "CAT - URL has incorrect content category", "cell.entry_false_detections_000033_608351": "Included in Support", "cell.entry_false_detections_000034_742536": "Included in Support", "cell.entry_false_detections_000036_3CD1F1": "Unknown URLs", "cell.entry_false_detections_000037_B5DDBC": "CAT-M - URL missing content category", "cell.entry_false_detections_000038_2B2D74": "Web addresses that haven't yet been analyzed or categorized - their safety status is still unknown.", "cell.entry_false_detections_000039_5CF42D": "Included in Support", "cell.entry_false_detections_00003B_826018": "Phishing False Positives", "cell.entry_false_detections_00003C_0CC928": "Legitimate site flagged as phishing", "cell.entry_false_detections_00003D_765641": "A legitimate website or email that's mistakenly flagged as a phishing attempt.", "cell.entry_false_detections_00003E_E50C47": "Included in Support", "cell.entry_false_detections_000040_10EBF3": "Spam False Positives", "cell.entry_false_detections_000041_A0A10C": "Legitimate email flagged as spam", "cell.entry_false_detections_000042_20A8B0": "A genuine email incorrectly identified and filtered as spam or junk.", "cell.entry_false_detections_000043_3216A0": "Included in Support", "cell.entry_false_detections_000045_2AED5C": "Request Whitelisting", "cell.entry_false_detections_000046_225272": "Allow safe apps blocked by security filters", "cell.entry_false_detections_000047_0285CA": "A trusted app, site, or process is blocked by security rules.", "cell.entry_false_detections_000048_19DD00": "Included in Support", "desc": [ "content.title_false_detections_000012_F3BDAC", { "table.table_false-detection-issue-types": [ { "thead.thead_false_detections_000018_4A4593": [ "cell.entry_false_detections_00001A_5FA2B5", "cell.entry_false_detections_00001B_C97A0B", "cell.entry_false_detections_00001C_543230", "cell.entry_false_detections_00001D_E6365E" ] }, { "row.row_false_detections_00001F_1E73FF": [ "cell.entry_false_detections_000020_BFF86D", "cell.entry_false_detections_000021_DDAE3D", "cell.entry_false_detections_000022_81076E", "cell.entry_false_detections_000024_C18F66" ] }, { "row.row_false_detections_000025_9BA19C": [ "cell.entry_false_detections_000026_A0D39A", "cell.entry_false_detections_000027_F972C7", "cell.entry_false_detections_000028_7504FD", "cell.entry_false_detections_000029_5E07BB" ] }, { "row.row_false_detections_00002A_22A877": [ "cell.entry_false_detections_00002B_43A886", "cell.entry_false_detections_00002C_5EEF49", "cell.entry_false_detections_00002D_803246", "cell.entry_false_detections_00002F_DE8CE7" ] }, { "row.row_false_detections_000030_B9F745": [ "cell.entry_false_detections_000031_CA1C83", "cell.entry_false_detections_000032_6B60A9", "cell.entry_false_detections_000033_608351", "cell.entry_false_detections_000034_742536" ] }, { "row.row_false_detections_000035_615598": [ "cell.entry_false_detections_000036_3CD1F1", "cell.entry_false_detections_000037_B5DDBC", "cell.entry_false_detections_000038_2B2D74", "cell.entry_false_detections_000039_5CF42D" ] }, { "row.row_false_detections_00003A_C1B82A": [ "cell.entry_false_detections_00003B_826018", "cell.entry_false_detections_00003C_0CC928", "cell.entry_false_detections_00003D_765641", "cell.entry_false_detections_00003E_E50C47" ] }, { "row.row_false_detections_00003F_B09CE5": [ "cell.entry_false_detections_000040_10EBF3", "cell.entry_false_detections_000041_A0A10C", "cell.entry_false_detections_000042_20A8B0", "cell.entry_false_detections_000043_3216A0" ] }, { "row.row_false_detections_000044_576C29": [ "cell.entry_false_detections_000045_2AED5C", "cell.entry_false_detections_000046_225272", "cell.entry_false_detections_000047_0285CA", "cell.entry_false_detections_000048_19DD00" ] } ] } ] }, "missed_detections-latest-en.json": { "title": "title_missed_detections_000001_26BC3", "title_missed_detections_000001_26BC3": "Missed Detections (Not Detected)", "shortdesc": "shortdesc_missed_detections_000002_27B24", "shortdesc_missed_detections_000002_27B24": "These issues occur when malicious content is not correctly identified or blocked.", "content.title_missed_detections_000012_BCC64": "Missed detection issue types", "cell.entry_missed_detections_00001A_89FCC": "Issue Type", "cell.entry_missed_detections_00001B_6BB83": "Reason", "cell.entry_missed_detections_00001C_927CA": "Description", "cell.entry_missed_detections_00001D_54929": "Plan Type", "cell.entry_missed_detections_000020_A81E3": "File-based False Negatives", "cell.entry_missed_detections_000021_BCE60": "FN - Malicious file not detected", "cell.entry_missed_detections_000022_59597": "A malicious file that goes undetected and is incorrectly marked as safe.", "cell.entry_missed_detections_000023_3BABD": "Included in Support", "cell.entry_missed_detections_000025_84203": "URL-based False Negatives", "cell.entry_missed_detections_000026_45421": "FN - Malicious URL not blocked", "cell.entry_missed_detections_000027_262A4": "A harmful or malicious website that isn't detected and is mistakenly considered safe.", "cell.entry_missed_detections_000028_F95A9": "Included in Support", "cell.entry_missed_detections_00002A_9A133": "Phishing False Negatives", "cell.entry_missed_detections_00002B_80D3F": "FN - Phishing not detected", "cell.entry_missed_detections_00002C_97410": "A real phishing website or email that's not detected and is wrongly treated as safe.", "cell.entry_missed_detections_00002D_BE779": "Included in Support", "cell.entry_missed_detections_00002F_C8C69": "Spam False Negatives", "cell.entry_missed_detections_000030_21E81": "FN - Spam not detected", "cell.entry_missed_detections_000031_516C4": "A spam email that slips through filters and appears in your inbox as if it were normal mail.", "cell.entry_missed_detections_000032_9F6CD": "Included in Support", "cell.entry_missed_detections_000034_3062B": "Email based false negatives", "cell.entry_missed_detections_000035_29CF2": "FN- suspicious email attachment", "cell.entry_missed_detections_000036_9719A": "A false negative occurred when an email containing a malicious or suspicious attachment was not detected or blocked by the email security system.", "cell.entry_missed_detections_000038_9182C": "Included in Support", "desc": [ "content.title_missed_detections_000012_BCC64", { "table.table_missed-detection-issue-types": [ { "thead.thead_missed_detections_000018_CF858": [ "cell.entry_missed_detections_00001A_89FCC", "cell.entry_missed_detections_00001B_6BB83", "cell.entry_missed_detections_00001C_927CA", "cell.entry_missed_detections_00001D_54929" ] }, { "row.row_missed_detections_00001F_22FBE": [ "cell.entry_missed_detections_000020_A81E3", "cell.entry_missed_detections_000021_BCE60", "cell.entry_missed_detections_000022_59597", "cell.entry_missed_detections_000023_3BABD" ] }, { "row.row_missed_detections_000024_DB185": [ "cell.entry_missed_detections_000025_84203", "cell.entry_missed_detections_000026_45421", "cell.entry_missed_detections_000027_262A4", "cell.entry_missed_detections_000028_F95A9" ] }, { "row.row_missed_detections_000029_B4035": [ "cell.entry_missed_detections_00002A_9A133", "cell.entry_missed_detections_00002B_80D3F", "cell.entry_missed_detections_00002C_97410", "cell.entry_missed_detections_00002D_BE779" ] }, { "row.row_missed_detections_00002E_5967D": [ "cell.entry_missed_detections_00002F_C8C69", "cell.entry_missed_detections_000030_21E81", "cell.entry_missed_detections_000031_516C4", "cell.entry_missed_detections_000032_9F6CD" ] }, { "row.row_missed_detections_000033_F7911": [ "cell.entry_missed_detections_000034_3062B", "cell.entry_missed_detections_000035_29CF2", "cell.entry_missed_detections_000036_9719A", "cell.entry_missed_detections_000038_9182C" ] } ] } ] }, "scope_clarification-latest-en.json": { "title": "title_scope_clarification_0000011169", "title_scope_clarification_0000011169": "Scope clarification", "shortdesc": "shortdesc_scope_clarification_000002B06D", "shortdesc_scope_clarification_000002B06D": "WithSecure? Sample Validation focuses exclusively on detection accuracy issues and is included within your support entitlement.", "content.dt_scope_clarification_0000156B2C": "Included in Support", "content.dd_scope_clarification_000016D886": "", "choice.choice_scope_clarification_000018F047": "False positives (any vector)", "choice.choice_scope_clarification_000019D224": "False negatives (any vector)", "choice.choice_scope_clarification_00001AB4DD": "URL categorization issues", "choice.choice_scope_clarification_00001BEDAD": "Allowlisting of safe items", "choice.choice_scope_clarification_00001CB125": "Detection-quality improvements", "content.dt_scope_clarification_00001E410F": "Not Included in Support", "content.dd_scope_clarification_00001FC4A4": "", "choice.choice_scope_clarification_000021EC15": "Compromised systems", "choice.choice_scope_clarification_000022CBDA": "Breaches or intrusions", "choice.choice_scope_clarification_000023367C": "Active or ongoing security incidents", "content.p_scope_clarification_000024CFED": "For incident response support, see:", "step.step_scope_clarification_000026EAC9": "WithSecure Incident response ", "step.step_scope_clarification_000029728D": "https://www.withsecure.com/en/solutions/managed-services/withsecure-elements-infiniteWithSecure? Elements Infinite", "step.step_scope_clarification_00002DACD2": "https://www.withsecure.com/en/solutions/software-and-services/withsecure-elevateWithSecure? Elevate", "step.step_scope_clarification_000031D7FA": "https://www.withsecure.com/en/solutions/software-and-services/co-monitoringWithSecure? Co-Monitoring Service", "desc": [ { "dl.dl_scope_clarification_000013AD16": [ { "dlentry.dlentry_scope_clarification_0000141025": [ "content.dt_scope_clarification_0000156B2C", "content.dd_scope_clarification_000016D886", { "choices.ul_scope_clarification_0000179E17": [ "choice.choice_scope_clarification_000018F047", "choice.choice_scope_clarification_000019D224", "choice.choice_scope_clarification_00001AB4DD", "choice.choice_scope_clarification_00001BEDAD", "choice.choice_scope_clarification_00001CB125" ] } ] }, { "dlentry.dlentry_scope_clarification_00001DD2BB": [ "content.dt_scope_clarification_00001E410F", "content.dd_scope_clarification_00001FC4A4", { "choices.ul_scope_clarification_0000208C68": [ "choice.choice_scope_clarification_000021EC15", "choice.choice_scope_clarification_000022CBDA", "choice.choice_scope_clarification_000023367C" ] } ] } ] }, "content.p_scope_clarification_000024CFED", { "steps.ul_scope_clarification_000025DC23": [ "step.step_scope_clarification_000026EAC9", "step.step_scope_clarification_000029728D", "step.step_scope_clarification_00002DACD2", "step.step_scope_clarification_000031D7FA" ] } ] }, "prerequisites_and_service_availability-latest-en.json": { "title": "title_getting_started_with_sam_0A0A3", "title_getting_started_with_sam_0A0A3": "Getting started with WithSecure Sample Validation: What you need and Why it helps", "shortdesc": "shortdesc_getting_started_with_sam_03D32", "shortdesc_getting_started_with_sam_03D32": "Explains the requirements for submitting samples through WithSecure Sample Validation and the benefits of the service.", "content.title_getting_started_with_sam_017B9": "Requirements", "content.p_getting_started_with_sam_09C72": "To benefit from the WithSecure Sample Validation service, make sure the following requirements are met:", "content.dt_getting_started_with_sam_09D9F": "Valid Elements subscription", "content.dd_getting_started_with_sam_0A788": "", "choice.choice_getting_started_with_sam_095DB": "A current Elements subscription is required to access the service.", "choice.choice_getting_started_with_sam_0E0FF": "If you are using another WithSecure solution - such as On-Premises solutions Business Suite, Atlant, Email and Server Security) - and need access to the service, you can request access through WithSecure email support.", "content.dt_getting_started_with_sam_077D9": "Elements administrator user account", "content.dd_getting_started_with_sam_0B4DE": "", "choice.choice_getting_started_with_sam_0A046": "You must have an active Elements administrator account.", "choice.choice_getting_started_with_sam_021C6": "If you do not have one, contact your system administrator, solution provider, or service provider to request access.", "choice.choice_getting_started_with_sam_055B1": "If you need to add or assign administrator permissions, refer to the detailed guide: Adding a new administrator", "content.dt_getting_started_with_sam_066F4": "Valid sample submission", "content.dd_getting_started_with_sam_09B12": "", "choice.choice_getting_started_with_sam_0F574": "You must submit a valid sample (e.g., a file, URL, or email) for analysis.", "content.dt_getting_started_with_sam_0CF29": "One sample per request", "content.dd_getting_started_with_sam_0698B": "", "content.note_getting_started_with_sam_0C732": "Important: Sample requests must not be submitted to the Technical Support team.", "choice.choice_getting_started_with_sam_043A7": "Each request may contain only one sample. Multiple submissions within the same request are not supported.", "content.title_getting_started_with_sam_09646": "Main benefits of the WithSecure Sample Validation service", "content.dt_getting_started_with_sam_01E06": "Stronger Security & Authentication", "content.dd_getting_started_with_sam_0F465": "", "choice.choice_getting_started_with_sam_02810": "Access to the service now requires verified WithSecure Elements accounts", "choice.choice_getting_started_with_sam_0AB04": "Enhances security, accountability, and data integrity", "content.dt_getting_started_with_sam_0CAF5": "Improved Tracking & Visibility", "content.dd_getting_started_with_sam_09A97": "", "choice.choice_getting_started_with_sam_03F02": "Each submission includes status updates, reference IDs, and full history", "choice.choice_getting_started_with_sam_0748E": "Enables auditing, case management, and transparent communication", "content.dt_getting_started_with_sam_0965A": "Greater Control & Efficiency", "content.dd_getting_started_with_sam_0F169": "", "choice.choice_getting_started_with_sam_02CC9": "Verified access safeguards customer environments", "choice.choice_getting_started_with_sam_0AC53": "Every request is traceable for full accountability", "choice.choice_getting_started_with_sam_0D17A": "Streamlined processes deliver faster, more reliable resolutions", "desc": [ "content.title_getting_started_with_sam_017B9", "content.p_getting_started_with_sam_09C72", { "dl.dl_getting_started_with_sam_0A9D7": [ { "dlentry.dlentry_getting_started_with_sam_09FA6": [ "content.dt_getting_started_with_sam_09D9F", "content.dd_getting_started_with_sam_0A788", { "choices.ul_getting_started_with_sam_0733F": [ "choice.choice_getting_started_with_sam_095DB", "choice.choice_getting_started_with_sam_0E0FF" ] } ] }, { "dlentry.dlentry_getting_started_with_sam_076CA": [ "content.dt_getting_started_with_sam_077D9", "content.dd_getting_started_with_sam_0B4DE", { "choices.ul_getting_started_with_sam_0AF9B": [ "choice.choice_getting_started_with_sam_0A046", "choice.choice_getting_started_with_sam_021C6", "choice.choice_getting_started_with_sam_055B1" ] } ] }, { "dlentry.dlentry_getting_started_with_sam_0CD77": [ "content.dt_getting_started_with_sam_066F4", "content.dd_getting_started_with_sam_09B12", { "choices.ul_getting_started_with_sam_08C54": [ "choice.choice_getting_started_with_sam_0F574" ] } ] }, { "dlentry.dlentry_getting_started_with_sam_0E514": [ "content.dt_getting_started_with_sam_0CF29", "content.dd_getting_started_with_sam_0698B", { "choices.ul_getting_started_with_sam_099CE": [ "choice.choice_getting_started_with_sam_043A7", "content.note_getting_started_with_sam_0C732" ] } ] } ] }, "content.title_getting_started_with_sam_09646", { "dl.dl_getting_started_with_sam_008B6": [ { "dlentry.dlentry_getting_started_with_sam_0D8DC": [ "content.dt_getting_started_with_sam_01E06", "content.dd_getting_started_with_sam_0F465", { "choices.ul_getting_started_with_sam_0685B": [ "choice.choice_getting_started_with_sam_02810", "choice.choice_getting_started_with_sam_0AB04" ] } ] }, { "dlentry.dlentry_getting_started_with_sam_05E04": [ "content.dt_getting_started_with_sam_0CAF5", "content.dd_getting_started_with_sam_09A97", { "choices.ul_getting_started_with_sam_0169A": [ "choice.choice_getting_started_with_sam_03F02", "choice.choice_getting_started_with_sam_0748E" ] } ] }, { "dlentry.dlentry_getting_started_with_sam_090EA": [ "content.dt_getting_started_with_sam_0965A", "content.dd_getting_started_with_sam_0F169", { "choices.ul_getting_started_with_sam_03C0D": [ "choice.choice_getting_started_with_sam_02CC9", "choice.choice_getting_started_with_sam_0AC53", "choice.choice_getting_started_with_sam_0D17A" ] } ] } ] } ] }, "service_availability-latest-en.json": { "title": "title_service_availability_000001A41", "title_service_availability_000001A41": "Service Availability", "shortdesc": "shortdesc_service_availability_000007FEF", "shortdesc_service_availability_000007FEF": "The WithSecure Sample Validation service has defined availability hours for handling submitted requests. ", "content.dt_service_availability_00001B745": "Service Hours", "content.p_service_availability_00001450E": "Business hours
", "content.p_service_availability_00001A898": "Standard support only from Monday to Friday, 08:00–17:00 CEST.
", "content.p_service_availability_000011B41": "Support is not available outside these times, on weekends, or on public holidays unless explicitly agreed otherwise.", "content.dt_service_availability_0000134F8": "Time Zone", "content.dd_service_availability_000015A68": "Applicable time zone for service hours All stated service hours operate under the Central European Summer Time (CEST) time zone.", "content.dt_service_availability_000014346": "Support Channels", "content.p_service_availability_00001295C": "Where requests can be submitted
", "content.p_service_availability_0000278BD": "All service requests must be created through the WithSecure Elements Security Center Portal.
", "content.p_service_availability_000020EDE": "You can open a new request directly from the Requests page within the Elements portal.", "content.dt_service_availability_000020238": "Response Times", "content.dd_service_availability_00002129B": "Target timeframe for initial acknowledgment WithSecure aims to acknowledge incoming requests within 24 hours during standard service hours. Actual resolution times may vary depending on the complexity and nature of the request.", "content.dt_service_availability_0000206D1": "Coverage Scope", "content.p_service_availability_00002F03C": "Environments or regions included in the service
", "content.p_service_availability_00002E65F": "The service is available globally and applies to all supported WithSecure Products.
", "content.p_service_availability_0000222FF": "Support is limited to environments explicitly supported by WithSecure's product documentation.", "content.dt_service_availability_00003687F": "Service Exceptions", "content.dd_service_availability_0000313DE": "", "content.dd_p_service_availability_000036CEE": "Conditions where service may be limited or unavailable
", "content.dd_p_service_availability_00003B421": "Conditions where service may be limited or unavailable.
", "content.dd_p_service_availability_0000369D8": "The request service does not include:
", "choice.choice_service_availability_000037A4F": "Investigation of security incidents or potential compromises", "choice.choice_service_availability_000031986": "Forensic analysis or system recovery", "choice.choice_service_availability_000039283": "Activities outside the scope of the submitted sample", "content.dd_p_service_availability_0000344A9": "Requests involving configuration guidance or product-specific operational questions are handled by WithSecure Technical Support, not by the Sample Validation service.
", "content.dd_p_service_availability_0000335AE": "Additional limitations include:
", "choice.choice_service_availability_0000374F1": "Support is provided in English only", "choice.choice_service_availability_00004C6E7": "No phone calls, remote sessions, or direct system access", "choice.choice_service_availability_00004E5FC": "Assistance is delivered exclusively via comments in the request", "choice.choice_service_availability_000048ACD": "Samples over 100 MB must be submitted via the Dropzone", "choice.choice_service_availability_000048EBE": "A valid vendor certificate is required for allowlisting requests (see How to Request Whitelisting for details)", "content.p_service_availability_0000454AC": "", "content.dt_service_availability_00004D8BF": "Escalation Process", "content.p_service_availability_00004A603": "Path for urgent or unresolved cases
", "content.p_service_availability_0000466FD": "For updates, clarifications, or follow-ups, use the comment section in your existing request.
", "content.p_service_availability_000045F02": "The comments show the reference ID for your request. Include this ID in any related communication.", "desc": [ { "dl.dl_service_availability_0000182B2": [ { "dlentry.dlentry_service_availability_00001EF5E": [ "content.dt_service_availability_00001B745", "content.p_service_availability_00001450E", "content.p_service_availability_00001A898", "content.p_service_availability_000011B41" ] }, { "dlentry.dlentry_service_availability_000019758": [ "content.dt_service_availability_0000134F8", "content.dd_service_availability_000015A68" ] }, { "dlentry.dlentry_service_availability_000018FA3": [ "content.dt_service_availability_000014346", "content.p_service_availability_00001295C", "content.p_service_availability_0000278BD", "content.p_service_availability_000020EDE" ] }, { "dlentry.dlentry_service_availability_000021EDE": [ "content.dt_service_availability_000020238", "content.dd_service_availability_00002129B" ] }, { "dlentry.dlentry_service_availability_0000227F8": [ "content.dt_service_availability_0000206D1", "content.p_service_availability_00002F03C", "content.p_service_availability_00002E65F", "content.p_service_availability_0000222FF" ] }, { "dlentry.dlentry_service_availability_00003C89C": [ "content.dt_service_availability_00003687F", "content.dd_service_availability_0000313DE", "content.dd_p_service_availability_000036CEE", "content.dd_p_service_availability_00003B421", "content.dd_p_service_availability_0000369D8", { "choices.ul_service_availability_000039548": [ "choice.choice_service_availability_000037A4F", "choice.choice_service_availability_000031986", "choice.choice_service_availability_000039283" ] }, "content.dd_p_service_availability_0000344A9", "content.dd_p_service_availability_0000335AE", { "choices.ul_service_availability_00003A716": [ "choice.choice_service_availability_0000374F1", "choice.choice_service_availability_00004C6E7", "choice.choice_service_availability_00004E5FC", "choice.choice_service_availability_000048ACD", "choice.choice_service_availability_000048EBE" ] }, "content.p_service_availability_0000454AC" ] }, { "dlentry.dlentry_service_availability_00004F163": [ "content.dt_service_availability_00004D8BF", "content.p_service_availability_00004A603", "content.p_service_availability_0000466FD", "content.p_service_availability_000045F02" ] } ] } ] }, "service_delivery_process-latest-en.json": { "title": "title_service_delivery_process_067FE", "title_service_delivery_process_067FE": "Service Delivery", "shortdesc": "shortdesc_service_delivery_process_067D3", "shortdesc_service_delivery_process_067D3": "The WithSecure Sample Validation service follows a defined delivery process for handling submitted requests. ", "content.dt_service_delivery_process_00C34": "Delivery Process", "content.p_service_delivery_process_0114B": "Steps or workflow for delivering the service
", "content.p_service_delivery_process_04609": "Requests are submitted through the WithSecure Elements Security Center, where they are reviewed, validated, and analyzed by WithSecure experts.
", "content.p_service_delivery_process_003E3": "Throughout the investigation, all findings, updates, and final results are communicated within the same request, ensuring a clear and trackable audit trail.
", "content.p_service_delivery_process_0A109": "For more information, see Resolution.", "content.dt_service_delivery_process_0A9A4": "Roles and Responsibilities", "content.dd_service_delivery_process_0AAF2": "", "content.dd_p_service_delivery_process_020FC": "Who is responsible for each part of the service
", "content.dt_service_delivery_process_031E5": "Customer", "content.dd_service_delivery_process_0DC9B": "", "choice.choice_service_delivery_process_09394": "Submits samples or requests via the Elements Security Center.", "choice.choice_service_delivery_process_09205": "Provides the necessary files, context, or supporting information to enable efficient analysis.", "content.dt_service_delivery_process_01CF5": "WithSecure", "content.dd_service_delivery_process_06748": "", "choice.choice_service_delivery_process_0A1B2": "Reviews and analyzes submitted materials.", "choice.choice_service_delivery_process_065F3": "Provides verdicts, detection updates, or guidance based on the findings.", "content.dt_service_delivery_process_0622E": "Service Channels", "content.p_service_delivery_process_0E902": "Where and how delivery takes place
", "content.p_service_delivery_process_0B761": "For large files (over 100 MB) or extensive log collections, customers should use the secure Dropzone", "content.dt_service_delivery_process_0530E": "Tools and Systems Used", "content.p_service_delivery_process_0302D": "Platforms and systems supporting the service
", "content.p_service_delivery_process_00EEB": "Final verdicts, detections, and updates are delivered through the WithSecure Security Cloud, including any relevant rules or virus definition updates.
", "content.p_service_delivery_process_03956": "For more information, see Resolution.", "content.dt_service_delivery_process_025E4": "Communication and Updates", "content.dd_service_delivery_process_035CF": "", "content.dd_p_service_delivery_process_01069": "How and when customers receive updates
", "content.dd_p_service_delivery_process_06CE5": "All communication - status updates, clarifications, findings, and final outcomes - occurs within the request itself to maintain clarity and ensure complete record-keeping.
", "content.dt_service_delivery_process_02B31": "Targeted Delivery Time", "content.p_service_delivery_process_02DAE": "Expected timelines for investigation or resolution
", "content.p_service_delivery_process_07652": "All results and feedback are provided directly within the same request. For details, see Resolution.", "content.dt_service_delivery_process_0A19D": "Dependencies", "content.p_service_delivery_process_0A038": "Requirements for effective service delivery
", "content.p_service_delivery_process_0E3C5": "To maintain efficient analysis and timely delivery, you must provide sufficient information, samples, or evidence with their initial submission.
", "content.p_service_delivery_process_00AA2": "If additional data is required - for example, when investigating a possible false negative - WithSecure will request the needed details through the same request thread.", "desc": [ { "dl.dl_service_delivery_process_05B15": [ { "dlentry.dlentry_service_delivery_process_06580": [ "content.dt_service_delivery_process_00C34", "content.p_service_delivery_process_0114B", "content.p_service_delivery_process_04609", "content.p_service_delivery_process_003E3", "content.p_service_delivery_process_0A109" ] }, { "dlentry.dlentry_service_delivery_process_086E4": [ "content.dt_service_delivery_process_0A9A4", "content.dd_service_delivery_process_0AAF2", "content.dd_p_service_delivery_process_020FC", { "dl.dl_service_delivery_process_0C949": [ { "dlentry.dlentry_service_delivery_process_07EF4": [ "content.dt_service_delivery_process_031E5", "content.dd_service_delivery_process_0DC9B", { "choices.ul_service_delivery_process_04F18": [ "choice.choice_service_delivery_process_09394", "choice.choice_service_delivery_process_09205" ] } ] }, { "dlentry.dlentry_service_delivery_process_061A6": [ "content.dt_service_delivery_process_01CF5", "content.dd_service_delivery_process_06748", { "choices.ul_service_delivery_process_0D231": [ "choice.choice_service_delivery_process_0A1B2", "choice.choice_service_delivery_process_065F3" ] } ] } ] } ] }, { "dlentry.dlentry_service_delivery_process_064E8": [ "content.dt_service_delivery_process_0622E", "content.p_service_delivery_process_0E902", "content.p_service_delivery_process_0B761" ] }, { "dlentry.dlentry_service_delivery_process_03F72": [ "content.dt_service_delivery_process_0530E", "content.p_service_delivery_process_0302D", "content.p_service_delivery_process_00EEB", "content.p_service_delivery_process_03956" ] }, { "dlentry.dlentry_service_delivery_process_08FE2": [ "content.dt_service_delivery_process_025E4", "content.dd_service_delivery_process_035CF", "content.dd_p_service_delivery_process_01069", "content.dd_p_service_delivery_process_06CE5" ] }, { "dlentry.dlentry_service_delivery_process_05C3E": [ "content.dt_service_delivery_process_02B31", "content.p_service_delivery_process_02DAE", "content.p_service_delivery_process_07652" ] }, { "dlentry.dlentry_service_delivery_process_0398A": [ "content.dt_service_delivery_process_0A19D", "content.p_service_delivery_process_0A038", "content.p_service_delivery_process_0E3C5", "content.p_service_delivery_process_00AA2" ] } ] } ], "related": [ "verdicts_resolution-latest-en" ] }, "creating_and_viewing_sample_validation_requests_in_the_request_views-latest-en.json": { "title": "title_creating_and_viewing_sam_01270", "title_creating_and_viewing_sam_01270": "Creating and viewing sample validation requests in the request views", "shortdesc": "shortdesc_creating_and_viewing_sam_0B229", "shortdesc_creating_and_viewing_sam_0B229": "Create sample validation requests for suspicious files, URLs, and email, and track their status in the request views.", "content.p_creating_and_viewing_sam_048DE": "From the request views you can submit new samples for validation, add comments to open requests, and follow each request through to resolution.", "desc": [ "content.p_creating_and_viewing_sam_048DE" ] }, "creating_and_viewing_sample_validation_request_in_the_request_views-latest-en.json": { "title": "title_choosing_the_correct_sam_0EA47", "title_choosing_the_correct_sam_0EA47": "Choosing the correct Sample Type", "shortdesc": "shortdesc_choosing_the_correct_sam_08823", "shortdesc_choosing_the_correct_sam_08823": "Selecting the correct sample type when submitting a request ensures accurate analysis and faster resolution.", "content.dthd_choosing_the_correct_sam_01C8B": "File Sample Type", "content.ddhd_choosing_the_correct_sam_02611": "Choose this category when the issue involves a file from a device.", "content.dt_choosing_the_correct_sam_08B1A": "File-Based False Positive", "content.dd_choosing_the_correct_sam_00121": "A clean file incorrectly detected as malware.
", "content.dd_choosing_the_correct_sam_0B56F": "For example: A company's internal tool flagged as a trojan.", "content.dt_choosing_the_correct_sam_0DC0A": "Potentially Unwanted Application (PUA)", "content.dd_choosing_the_correct_sam_05875": "Legitimate software detected as unwanted.
", "content.dd_choosing_the_correct_sam_03DD9": "For example: A remote admin or adware-style installer used for business purposes.", "content.dt_choosing_the_correct_sam_0FB8F": "File-Based False Negative", "content.dd_choosing_the_correct_sam_091AE": "A malicious file not detected by the product.
", "content.dd_choosing_the_correct_sam_0FD18": "For example: A ransomware executable encrypts data without being blocked.", "content.dthd_choosing_the_correct_sam_047F1": "URL Sample Type", "content.ddhd_choosing_the_correct_sam_0BF04": "Choose this category when the issue involves a URL, website, or IP address.", "content.dt_choosing_the_correct_sam_0F088": "URL-Based False Positive", "content.dd_choosing_the_correct_sam_0A34C": "A safe website is blocked by mistake.
", "content.dd_choosing_the_correct_sam_05FBF": "For example: https://partnerportal.company.com blocked as phishing.", "content.dt_choosing_the_correct_sam_09359": "URL Categorization", "content.dd_choosing_the_correct_sam_0E55F": "Request to update or correct the URL category.
", "content.dd_choosing_the_correct_sam_0ABF5": "For example: Reclassifying a corporate blog from \"Unknown\" to \"Business.\"", "content.dt_choosing_the_correct_sam_0B218": "Unknown URL", "content.dd_choosing_the_correct_sam_00E16": "A new or uncategorized domain requiring classification.
", "content.dd_choosing_the_correct_sam_0FB50": "For example: Submitting https://newvendor.io for review.", "content.dt_choosing_the_correct_sam_09C76": "URL-Based False Negative", "content.dd_choosing_the_correct_sam_0590D": "A harmful website is not blocked by the product.
", "content.dd_choosing_the_correct_sam_065F8": "For example: http://malicious-site.ru remains accessible and serves malware.", "content.dthd_choosing_the_correct_sam_00241": "Email Sample Type", "content.ddhd_choosing_the_correct_sam_00F33": "Choose this category when the issue involves an email sample.", "content.dt_choosing_the_correct_sam_006FF": "Phishing False Positive", "content.dd_choosing_the_correct_sam_0EECB": "A legitimate email incorrectly marked as phishing.
", "content.dd_choosing_the_correct_sam_0E9F9": "For example: Vendor invoice emails flagged incorrectly.", "content.dt_choosing_the_correct_sam_0C26D": "Phishing False Negative", "content.dd_choosing_the_correct_sam_01D4B": "A phishing email not detected.
", "content.dd_choosing_the_correct_sam_0D752": "For example: A spoofed Microsoft 365 login email reaches the inbox.", "content.dt_choosing_the_correct_sam_07410": "Email Attachment Not Detected", "content.dd_choosing_the_correct_sam_065B7": "A malicious attachment is not detected by security products.
", "content.dd_choosing_the_correct_sam_0DC36": "For example: Unexpected ZIP/Invoice file requiring a password mentioned in the email.", "content.dt_choosing_the_correct_sam_03F26": "Spam False Negative", "content.dd_choosing_the_correct_sam_0872A": "Junk or promotional emails delivered to inbox.
", "content.dd_choosing_the_correct_sam_0A312": "For example: Promotional spam not filtered out.", "content.dthd_choosing_the_correct_sam_04CC7": "Allowlisting Requests", "content.ddhd_choosing_the_correct_sam_0B531": "Choose this category for allowlisting tools, apps, or scripts.", "content.dt_choosing_the_correct_sam_0CF12": "Request Whitelisting", "content.dd_choosing_the_correct_sam_050CA": "Request to whitelist legitimate tools, scripts, or applications - often during development. May require temporary security exceptions.
", "content.dd_choosing_the_correct_sam_0EC9D": "For example: WithSecure products block unsigned binaries, packers, automation scripts, or local dev servers, and adjustments are not feasible during early development stages.", "desc": [ { "dl.dl_choosing_the_correct_sam_06924": [ { "dlhead.dlhead_choosing_the_correct_sam_02916": [ "content.dthd_choosing_the_correct_sam_01C8B", "content.ddhd_choosing_the_correct_sam_02611" ] }, { "dlentry.dlentry_choosing_the_correct_sam_0DEE6": [ "content.dt_choosing_the_correct_sam_08B1A", "content.dd_choosing_the_correct_sam_00121", "content.dd_choosing_the_correct_sam_0B56F" ] }, { "dlentry.dlentry_choosing_the_correct_sam_0F0A7": [ "content.dt_choosing_the_correct_sam_0DC0A", "content.dd_choosing_the_correct_sam_05875", "content.dd_choosing_the_correct_sam_03DD9" ] }, { "dlentry.dlentry_choosing_the_correct_sam_0D907": [ "content.dt_choosing_the_correct_sam_0FB8F", "content.dd_choosing_the_correct_sam_091AE", "content.dd_choosing_the_correct_sam_0FD18" ] } ] }, { "dl.dl_choosing_the_correct_sam_06E00": [ { "dlhead.dlhead_choosing_the_correct_sam_01D73": [ "content.dthd_choosing_the_correct_sam_047F1", "content.ddhd_choosing_the_correct_sam_0BF04" ] }, { "dlentry.dlentry_choosing_the_correct_sam_0CFB8": [ "content.dt_choosing_the_correct_sam_0F088", "content.dd_choosing_the_correct_sam_0A34C", "content.dd_choosing_the_correct_sam_05FBF" ] }, { "dlentry.dlentry_choosing_the_correct_sam_0418B": [ "content.dt_choosing_the_correct_sam_09359", "content.dd_choosing_the_correct_sam_0E55F", "content.dd_choosing_the_correct_sam_0ABF5" ] }, { "dlentry.dlentry_choosing_the_correct_sam_03D7C": [ "content.dt_choosing_the_correct_sam_0B218", "content.dd_choosing_the_correct_sam_00E16", "content.dd_choosing_the_correct_sam_0FB50" ] }, { "dlentry.dlentry_choosing_the_correct_sam_0F0ED": [ "content.dt_choosing_the_correct_sam_09C76", "content.dd_choosing_the_correct_sam_0590D", "content.dd_choosing_the_correct_sam_065F8" ] } ] }, { "dl.dl_choosing_the_correct_sam_0E333": [ { "dlhead.dlhead_choosing_the_correct_sam_0A6E8": [ "content.dthd_choosing_the_correct_sam_00241", "content.ddhd_choosing_the_correct_sam_00F33" ] }, { "dlentry.dlentry_choosing_the_correct_sam_04BB8": [ "content.dt_choosing_the_correct_sam_006FF", "content.dd_choosing_the_correct_sam_0EECB", "content.dd_choosing_the_correct_sam_0E9F9" ] }, { "dlentry.dlentry_choosing_the_correct_sam_072D9": [ "content.dt_choosing_the_correct_sam_0C26D", "content.dd_choosing_the_correct_sam_01D4B", "content.dd_choosing_the_correct_sam_0D752" ] }, { "dlentry.dlentry_choosing_the_correct_sam_07D10": [ "content.dt_choosing_the_correct_sam_07410", "content.dd_choosing_the_correct_sam_065B7", "content.dd_choosing_the_correct_sam_0DC36" ] }, { "dlentry.dlentry_choosing_the_correct_sam_021E6": [ "content.dt_choosing_the_correct_sam_03F26", "content.dd_choosing_the_correct_sam_0872A", "content.dd_choosing_the_correct_sam_0A312" ] } ] }, { "dl.dl_choosing_the_correct_sam_0C0B2": [ { "dlhead.dlhead_choosing_the_correct_sam_020FE": [ "content.dthd_choosing_the_correct_sam_04CC7", "content.ddhd_choosing_the_correct_sam_0B531" ] }, { "dlentry.dlentry_choosing_the_correct_sam_00C97": [ "content.dt_choosing_the_correct_sam_0CF12", "content.dd_choosing_the_correct_sam_050CA", "content.dd_choosing_the_correct_sam_0EC9D" ] } ] } ] }, "submitting_a_file_sample-latest-en.json": { "title": "title_submitting_a_file_sample_034CB", "title_submitting_a_file_sample_034CB": "Submit a file sample", "shortdesc": "shortdesc_submitting_a_file_sample_060C0", "shortdesc_submitting_a_file_sample_060C0": "Submit a file sample for validation in the Elements Security Center.", "content.p_submitting_a_file_sample_02C99": "Make sure that you are using one of the supported browsers:", "step.step_submitting_a_file_sample_0FF20": "Chrome", "step.step_submitting_a_file_sample_077F0": "Edge", "step.step_submitting_a_file_sample_0BD46": "Firefox", "content.p_submitting_a_file_sample_0A822": "Access from mobile devices is not supported.", "content.p_submitting_a_file_sample_0D664": "If you are an administrator with Solution Provider (SOP) or Service Provider (SEP) level access, first select the appropriate Customer company using the scope selector located at the top of the Elements portal.", "content.p_submitting_a_file_sample_021DC": "The WithSecure Sample Validation service is located in the Elements Security Center portal:", "step.step_submitting_a_file_sample_06B63": "Logging in to non-federated domains", "step.step_submitting_a_file_sample_0099F": "Logging in to federated domains", "step.step_submitting_a_file_sample_0CC33": "Multi-factor authentication", "content.note_submitting_a_file_sample_05784": "Important: Sample Validation requests in the Elements portal are always created at the company level. Once the correct customer company has been selected, you can proceed to the Requests page to create or view Sample Validation requests.", "step.step_submitting_a_file_sample_0BD75": "Log in to the Elements Security Center Portal", "step.step_submitting_a_file_sample_0C33C": "Go the Requests page on the menu on the left", "step.step_submitting_a_file_sample_0CC1D": "Select Create Request.", "step.step_submitting_a_file_sample_0BA60": "Open the Request type drop-down menu and select Submit sample for validation", "content.p_submitting_a_file_sample_01EEE": "Make sure you selected the correct sample type for the file.", "subchoice.choice_submitting_a_file_sample_06B24": "File-Based False Positive: A clean file incorrectly detected as malware. For example, a company's internal tool flagged as a trojan.", "subchoice.choice_submitting_a_file_sample_0A1FA": "Potentially Unwanted Application (PUA): Legitimate software detected as unwanted. For example, a remote admin or adware-style installer used for business purposes.", "subchoice.choice_submitting_a_file_sample_07EA0": "File-Based False Negative: A malicious file not detected by the product. For example, a ransomware executable encrypts data without being blocked.", "step.step_submitting_a_file_sample_05638": "Open the Sample type drop-down menu and select File", "step.step_submitting_a_file_sample_08CDE": "Drag and drop the file or click Browse to upload the file", "substep.step_submitting_a_file_sample_0A8D8": "False Positive - Clean file was blocked", "substep.step_submitting_a_file_sample_0E8CE": "False Negative - Malicious file not detected", "substep.step_submitting_a_file_sample_08723": "Potentially unwanted application detected", "substep.step_submitting_a_file_sample_0A478": "Request whitelisting", "content.p_submitting_a_file_sample_06BC1": "", "step.step_submitting_a_file_sample_074C5": "Open the Request reason drop-down menu and select one option:", "step.step_submitting_a_file_sample_0C442": "Open the Product name drop down menu and select the product.", "step.step_submitting_a_file_sample_0CA5F": "Add a short title for the request in the Title field.", "step.step_submitting_a_file_sample_0675C": "Write down a description of the file or summary of concern.", "step.step_submitting_a_file_sample_0F65B": "Click Create Request.", "content.p_submitting_a_file_sample_03ABD": "The sample request is submitted to WithSecure.", "desc": [ "content.p_submitting_a_file_sample_02C99", { "steps.ul_submitting_a_file_sample_02C31": [ "step.step_submitting_a_file_sample_0FF20", "step.step_submitting_a_file_sample_077F0", "step.step_submitting_a_file_sample_0BD46" ] }, "content.p_submitting_a_file_sample_0A822", "content.p_submitting_a_file_sample_0D664", "content.p_submitting_a_file_sample_021DC", { "steps.ul_submitting_a_file_sample_0C2A1": [ "step.step_submitting_a_file_sample_06B63", "step.step_submitting_a_file_sample_0099F", "step.step_submitting_a_file_sample_0CC33" ] }, "content.note_submitting_a_file_sample_05784", { "steps.steps_submitting_a_file_sample_0EC15": [ "step.step_submitting_a_file_sample_0BD75", "step.step_submitting_a_file_sample_0C33C", "step.step_submitting_a_file_sample_0CC1D", "step.step_submitting_a_file_sample_0BA60", "step.step_submitting_a_file_sample_05638", "content.p_submitting_a_file_sample_01EEE", { "subchoices.choices_submitting_a_file_sample_0D173": [ "subchoice.choice_submitting_a_file_sample_06B24", "subchoice.choice_submitting_a_file_sample_0A1FA", "subchoice.choice_submitting_a_file_sample_07EA0" ] }, "step.step_submitting_a_file_sample_08CDE", "step.step_submitting_a_file_sample_074C5", "content.p_submitting_a_file_sample_06BC1", { "substeps.olalpha_submittingalpha_aalpha_filealpha_samplealpha_0A513": [ "substep.step_submitting_a_file_sample_0A8D8", "substep.step_submitting_a_file_sample_0E8CE", "substep.step_submitting_a_file_sample_08723", "substep.step_submitting_a_file_sample_0A478" ] }, "step.step_submitting_a_file_sample_0C442", "step.step_submitting_a_file_sample_0CA5F", "step.step_submitting_a_file_sample_0675C", "step.step_submitting_a_file_sample_0F65B" ] }, "content.p_submitting_a_file_sample_03ABD" ] }, "submitting_a_url_sample-latest-en.json": { "title": "title_submitting_url_sample_0000FC68", "title_submitting_url_sample_0000FC68": "Submit a URL sample", "shortdesc": "shortdesc_submitting_url_sample_0000D993", "shortdesc_submitting_url_sample_0000D993": "Submit a URL sample for validation in the Elements Security Center. ", "content.p_submitting_url_sample_0000ACE1": "Make sure that you are using one of the supported browsers:", "step.step_submitting_url_sample_00003DED": "Chrome", "step.step_submitting_url_sample_00007710": "Edge", "step.step_submitting_url_sample_00005E6A": "Firefox", "content.p_submitting_url_sample_0000584F": "Access from mobile devices is not supported.", "content.p_submitting_url_sample_000083CA": "If you are an administrator with Solution Provider (SOP) or Service Provider (SEP) level access, first select the appropriate customer company using the scope selector located at the top of the Elements portal.", "content.p_submitting_url_sample_000055F6": "The WithSecure Sample Validation service is located in the Elements Security Center portal:", "step.step_submitting_url_sample_0000B97A": "Logging in to non-federated domains", "step.step_submitting_url_sample_00006B3F": "Logging in to federated domains", "step.step_submitting_url_sample_0000017E": "Multi-factor authentication", "content.note_submitting_url_sample_00009E38": "Important: Sample Validation requests in the Elements portal are always created at the company level. Once the correct customer company has been selected, you can proceed to the Requests page to create or view Sample Validation requests .", "step.step_submitting_url_sample_00005943": "Log in to the Elements Security Center Portal", "step.step_submitting_url_sample_0000ACB3": "Go the Requests page on the menu on the left", "step.step_submitting_url_sample_0000E675": "Select Create Request.", "step.step_submitting_url_sample_00006454": "Open the Request type drop-down menu and select Submit sample for validation", "content.p_submitting_url_sample_0000A808": "Make sure you selected the correct sample type.", "subchoice.choice_submitting_url_sample_00002C03": "URL-Based False Positive: A safe website is blocked by mistake. For example, https://partnerportal.company.com blocked as phishing.", "subchoice.choice_submitting_url_sample_00004A9C": "URL Categorization: Request to update or correct the URL category. For example, reclassifying a corporate blog from \"Unknown\" to \"Business.\"", "subchoice.choice_submitting_url_sample_0000C0A8": "Unknown URL: A new or uncategorized domain requiring classification. For example, submitting https://newvendor.io for review.", "subchoice.choice_submitting_url_sample_0000C80B": "URL-Based False Negative: A harmful website is not blocked by the product. For example, http://malicious-site.ru remains accessible and serves malware.", "step.step_submitting_url_sample_000090F7": "Open the Sample type drop-down menu and select URL.", "step.step_submitting_url_sample_00005B31": "Enter URL or IP address.", "substep.step_submitting_url_sample_0000D130": "False Negative - Malicious URL not blocked", "substep.step_submitting_url_sample_0000CAA7": "False Positive - Trusted URL blocked", "substep.step_submitting_url_sample_0000EF4D": "CAT - URL has incorrect content category", "substep.step_submitting_url_sample_0000E5ED": "CAT - M - URL missing content category", "content.p_submitting_url_sample_00006753": "", "step.step_submitting_url_sample_00007413": "Open the Request reason drop-down menu and select one option:", "step.step_submitting_url_sample_000019C6": "Open the Product name drop-down menu and select the product", "step.step_submitting_url_sample_0000F0C4": "Add a short title for the request in the Title field", "step.step_submitting_url_sample_0000832C": "Write down a description of the file or summary of concern.", "step.step_submitting_url_sample_00009554": "Select Create Request.", "content.p_submitting_url_sample_00002569": "The sample request is submitted to WithSecure.", "desc": [ "content.p_submitting_url_sample_0000ACE1", { "steps.ul_submitting_url_sample_0000205A": [ "step.step_submitting_url_sample_00003DED", "step.step_submitting_url_sample_00007710", "step.step_submitting_url_sample_00005E6A" ] }, "content.p_submitting_url_sample_0000584F", "content.p_submitting_url_sample_000083CA", "content.p_submitting_url_sample_000055F6", { "steps.ul_submitting_url_sample_0000BD09": [ "step.step_submitting_url_sample_0000B97A", "step.step_submitting_url_sample_00006B3F", "step.step_submitting_url_sample_0000017E" ] }, "content.note_submitting_url_sample_00009E38", { "steps.steps_submitting_url_sample_0000106A": [ "step.step_submitting_url_sample_00005943", "step.step_submitting_url_sample_0000ACB3", "step.step_submitting_url_sample_0000E675", "step.step_submitting_url_sample_00006454", "step.step_submitting_url_sample_000090F7", "content.p_submitting_url_sample_0000A808", { "subchoices.choices_submitting_url_sample_0000F3E5": [ "subchoice.choice_submitting_url_sample_00002C03", "subchoice.choice_submitting_url_sample_00004A9C", "subchoice.choice_submitting_url_sample_0000C0A8", "subchoice.choice_submitting_url_sample_0000C80B" ] }, "step.step_submitting_url_sample_00005B31", "step.step_submitting_url_sample_00007413", "content.p_submitting_url_sample_00006753", { "substeps.olalpha_submittingalpha_urlalpha_samplealpha_0000127D": [ "substep.step_submitting_url_sample_0000D130", "substep.step_submitting_url_sample_0000CAA7", "substep.step_submitting_url_sample_0000EF4D", "substep.step_submitting_url_sample_0000E5ED" ] }, "step.step_submitting_url_sample_000019C6", "step.step_submitting_url_sample_0000F0C4", "step.step_submitting_url_sample_0000832C", "step.step_submitting_url_sample_00009554" ] }, "content.p_submitting_url_sample_00002569" ] }, "submitting_email_sample-latest-en.json": { "title": "title_submitting_email_sample_0056B5", "title_submitting_email_sample_0056B5": "Submit an email sample", "shortdesc": "shortdesc_submitting_email_sample_003198", "shortdesc_submitting_email_sample_003198": "Submit an email sample for validation in the Elements Security Center. ", "content.p_submitting_email_sample_006967": "Make sure that you are using one of the supported browsers:", "step.step_submitting_email_sample_004E4F": "Chrome", "step.step_submitting_email_sample_00B9F2": "Edge", "step.step_submitting_email_sample_00D60D": "Firefox", "content.p_submitting_email_sample_00BA0D": "Access from mobile devices is not supported.", "content.p_submitting_email_sample_005FD6": "If you are an administrator with Solution Provider (SOP) or Service Provider (SEP) level access, first select the appropriate customer company using the scope selector located at the top of the Elements portal.", "content.p_submitting_email_sample_00FAC3": "The WithSecure Sample Validation service is located in the Elements Security Center portal:", "step.step_submitting_email_sample_0061F1": "Logging in to non-federated domains", "step.step_submitting_email_sample_007943": "Logging in to federated domains", "step.step_submitting_email_sample_00427C": "Multi-factor authentication", "content.note_submitting_email_sample_0014A9": "Important: Sample Validation requests in the Elements portal are always created at the company level. Once the correct customer company has been selected, you can proceed to the Requests page to create or view Sample Validation requests .", "step.step_submitting_email_sample_00F6CF": "Log in to the Elements Security Center Portal", "step.step_submitting_email_sample_00E61F": "Go the Requests page on the menu on the left", "step.step_submitting_email_sample_003EAD": "Select Create Request.", "step.step_submitting_email_sample_00CC90": "Open the Request type drop-down menu and select Submit sample for validation", "content.p_submitting_email_sample_00B2F6": "Make sure you selected the correct sample type.", "subchoice.choice_submitting_email_sample_005DB4": "Phishing False Positive: A legitimate email incorrectly marked as phishing. For example, vendor invoice emails flagged incorrectly.", "subchoice.choice_submitting_email_sample_003C90": "Phishing False Negative: A phishing email not detected. For example, a spoofed Microsoft 365 login email reaches the inbox.", "subchoice.choice_submitting_email_sample_008B36": "Email Attachment Not Detected: A malicious attachment is not detected by security products. For example, unexpected ZIP/Invoice file requiring a password mentioned in the email.", "subchoice.choice_submitting_email_sample_00AF99": "Spam False Negative: Junk or promotional emails delivered to inbox. For example, promotional spam not filtered out.", "step.step_submitting_email_sample_00E969": "Open the Sample type drop-down menu and select Email.", "step.step_submitting_email_sample_0095DA": "Drag and drop the email file or click Browse to upload the email file", "substep.step_submitting_email_sample_0051F2": "False Positive - Legitimate email was blocked", "substep.step_submitting_email_sample_00935E": "False Negative - Phishing not detected", "substep.step_submitting_email_sample_0072F9": "False Negative - Spam not detected", "substep.step_submitting_email_sample_00657B": "False Negative - Malicious email not detected", "content.p_submitting_email_sample_00B7EA": "", "step.step_submitting_email_sample_001D39": "Open the Request reason drop-down menu and select one option:", "step.step_submitting_email_sample_006B15": "Open the Product name drop-down menu and select the product.", "step.step_submitting_email_sample_001065": "Add a short title for the request in the Title field.", "step.step_submitting_email_sample_00E6FF": "Write down a description of the file or summary of concern.", "step.step_submitting_email_sample_00AC07": "Click Create Request.", "content.p_submitting_email_sample_00AC48": "The sample request is submitted to WithSecure.", "desc": [ "content.p_submitting_email_sample_006967", { "steps.ul_submitting_email_sample_005E4B": [ "step.step_submitting_email_sample_004E4F", "step.step_submitting_email_sample_00B9F2", "step.step_submitting_email_sample_00D60D" ] }, "content.p_submitting_email_sample_00BA0D", "content.p_submitting_email_sample_005FD6", "content.p_submitting_email_sample_00FAC3", { "steps.ul_submitting_email_sample_00D9B1": [ "step.step_submitting_email_sample_0061F1", "step.step_submitting_email_sample_007943", "step.step_submitting_email_sample_00427C" ] }, "content.note_submitting_email_sample_0014A9", { "steps.steps_submitting_email_sample_001850": [ "step.step_submitting_email_sample_00F6CF", "step.step_submitting_email_sample_00E61F", "step.step_submitting_email_sample_003EAD", "step.step_submitting_email_sample_00CC90", "step.step_submitting_email_sample_00E969", "content.p_submitting_email_sample_00B2F6", { "subchoices.choices_submitting_email_sample_00A8BC": [ "subchoice.choice_submitting_email_sample_005DB4", "subchoice.choice_submitting_email_sample_003C90", "subchoice.choice_submitting_email_sample_008B36", "subchoice.choice_submitting_email_sample_00AF99" ] }, "step.step_submitting_email_sample_0095DA", "step.step_submitting_email_sample_001D39", "content.p_submitting_email_sample_00B7EA", { "substeps.olalpha_submittingalpha_emailalpha_samplealpha_0042FD": [ "substep.step_submitting_email_sample_0051F2", "substep.step_submitting_email_sample_00935E", "substep.step_submitting_email_sample_0072F9", "substep.step_submitting_email_sample_00657B" ] }, "step.step_submitting_email_sample_006B15", "step.step_submitting_email_sample_001065", "step.step_submitting_email_sample_00E6FF", "step.step_submitting_email_sample_00AC07" ] }, "content.p_submitting_email_sample_00AC48" ] }, "managing_and_viewing_open_requests-latest-en.json": { "title": "title_managing_and_viewing_ope_03706", "title_managing_and_viewing_ope_03706": "Managing and viewing Open Requests", "shortdesc": "shortdesc_managing_and_viewing_ope_0306E", "shortdesc_managing_and_viewing_ope_0306E": "The Request view shows the dashboard fields, the request statuses, and the auto-reminder and automatic-closure rules for sample validation requests in Elements Security Center.", "content.title_managing_and_viewing_ope_01C8F": "Request View / Dashboard Overview", "content.p_managing_and_viewing_ope_0FBE9": "In the Request view, you will find key information related to each submitted request such as:", "content.title_managing_and_viewing_ope_0FCC9": "Request view fields", "cell.entry_managing_and_viewing_ope_0DCF5": "Field", "cell.entry_managing_and_viewing_ope_01BE1": "Description", "cell.entry_managing_and_viewing_ope_0D452": "Title", "cell.entry_managing_and_viewing_ope_0DD95": "A short, descriptive name that identifies the request.", "cell.entry_managing_and_viewing_ope_04F28": "Request Type", "cell.entry_managing_and_viewing_ope_0528C": "Indicates the type of request submitted, such as Sample Validation or Whitelisting.", "cell.entry_managing_and_viewing_ope_007B3": "Created At", "cell.entry_managing_and_viewing_ope_0345E": "The date and time when the request was originally submitted.", "cell.entry_managing_and_viewing_ope_087EE": "Updated At", "cell.entry_managing_and_viewing_ope_01F31": "The most recent date and time when the request was modified or a comment was added.", "cell.entry_managing_and_viewing_ope_0E157": "Status", "cell.entry_managing_and_viewing_ope_088D8": "Shows the current progress of the request (New, Acknowledged, In Progress, Waiting for Customer, or Closed).", "cell.entry_managing_and_viewing_ope_0B80C": "Comments", "cell.entry_managing_and_viewing_ope_0D43E": "Displays the number of comments exchanged during the handling of the request; opening the request reveals the full conversation.", "content.title_managing_and_viewing_ope_06625": "Request Statuses and Descriptions", "content.p_managing_and_viewing_ope_05F2B": "Each request includes a status that appears both in the Status column on the Requests page and within the request details.", "content.p_managing_and_viewing_ope_089FB": "The table below explains what each status means and how you should respond.", "content.title_managing_and_viewing_ope_04A62": "Request status meanings", "cell.entry_managing_and_viewing_ope_0F1D8": "Status", "cell.entry_managing_and_viewing_ope_00A66": "What It Means", "cell.entry_managing_and_viewing_ope_0C58F": "What You Should Do", "cell.entry_managing_and_viewing_ope_0AF4C": "New", "cell.entry_managing_and_viewing_ope_08047": "We've received your request, and it is waiting to be acknowledged by the team.", "cell.entry_managing_and_viewing_ope_04255": "No action needed - the request is now in the queue.", "cell.entry_managing_and_viewing_ope_0DCC3": "Acknowledged", "cell.entry_managing_and_viewing_ope_01FAF": "The team has seen your request and accepted it for handling. The scope of the request has been reviewed and confirmed to fall within the service scope, and a Malware Analyst has accepted it for processing.", "cell.entry_managing_and_viewing_ope_0F7F8": "No action needed - analysis will begin shortly.", "cell.entry_managing_and_viewing_ope_00778": "In Progress", "cell.entry_managing_and_viewing_ope_0632E": "Our experts are actively analyzing your request.", "cell.entry_managing_and_viewing_ope_08E38": "No action required unless we contact you for additional information.", "cell.entry_managing_and_viewing_ope_03BB0": "Waiting for Customer", "cell.entry_managing_and_viewing_ope_03D77": "We need more information to continue with the analysis.", "cell.entry_managing_and_viewing_ope_02CC6": "Provide the requested details by replying within the request.", "cell.entry_managing_and_viewing_ope_0A296": "Closed", "cell.entry_managing_and_viewing_ope_0B236": "The request has been processed and completed.", "cell.entry_managing_and_viewing_ope_038D6": "No further action required - the request remains available for reference.", "content.title_managing_and_viewing_ope_03D64": "Auto-reminders and automatic Closure of Request", "content.dt_managing_and_viewing_ope_03D0B": "Reminder After 5 Days of Inactivity", "content.dd_managing_and_viewing_ope_0876C": "If a sample submission request remains in Waiting for Customer status with no response for 5 days, an automatic reminder will be sent to the customer requesting the required information or samples.", "content.dt_managing_and_viewing_ope_0D5A8": "Automatic Closure After 7 Days of Inactivity", "content.dd_managing_and_viewing_ope_04DE7": "If no customer response is received within 7 days while the request is in Waiting for Customer status, the ticket will be automatically closed.", "content.note_managing_and_viewing_ope_0225F": "Important: Closed requests cannot be reopened. If you need more help after a case closes, create a new support request.", "desc": [ "content.title_managing_and_viewing_ope_01C8F", "content.p_managing_and_viewing_ope_0FBE9", "content.title_managing_and_viewing_ope_0FCC9", { "table.table_request-view-fields": [ { "thead.thead_managing_and_viewing_ope_03F59": [ "cell.entry_managing_and_viewing_ope_0DCF5", "cell.entry_managing_and_viewing_ope_01BE1" ] }, { "row.row_managing_and_viewing_ope_095E5": [ "cell.entry_managing_and_viewing_ope_0D452", "cell.entry_managing_and_viewing_ope_0DD95" ] }, { "row.row_managing_and_viewing_ope_0D150": [ "cell.entry_managing_and_viewing_ope_04F28", "cell.entry_managing_and_viewing_ope_0528C" ] }, { "row.row_managing_and_viewing_ope_0FF39": [ "cell.entry_managing_and_viewing_ope_007B3", "cell.entry_managing_and_viewing_ope_0345E" ] }, { "row.row_managing_and_viewing_ope_03D21": [ "cell.entry_managing_and_viewing_ope_087EE", "cell.entry_managing_and_viewing_ope_01F31" ] }, { "row.row_managing_and_viewing_ope_0F007": [ "cell.entry_managing_and_viewing_ope_0E157", "cell.entry_managing_and_viewing_ope_088D8" ] }, { "row.row_managing_and_viewing_ope_0AB9B": [ "cell.entry_managing_and_viewing_ope_0B80C", "cell.entry_managing_and_viewing_ope_0D43E" ] } ] }, "content.title_managing_and_viewing_ope_06625", "content.p_managing_and_viewing_ope_05F2B", "content.p_managing_and_viewing_ope_089FB", "content.title_managing_and_viewing_ope_04A62", { "table.table_request-status-meanings": [ { "thead.thead_managing_and_viewing_ope_00604": [ "cell.entry_managing_and_viewing_ope_0F1D8", "cell.entry_managing_and_viewing_ope_00A66", "cell.entry_managing_and_viewing_ope_0C58F" ] }, { "row.row_managing_and_viewing_ope_077DA": [ "cell.entry_managing_and_viewing_ope_0AF4C", "cell.entry_managing_and_viewing_ope_08047", "cell.entry_managing_and_viewing_ope_04255" ] }, { "row.row_managing_and_viewing_ope_0825A": [ "cell.entry_managing_and_viewing_ope_0DCC3", "cell.entry_managing_and_viewing_ope_01FAF", "cell.entry_managing_and_viewing_ope_0F7F8" ] }, { "row.row_managing_and_viewing_ope_009BD": [ "cell.entry_managing_and_viewing_ope_00778", "cell.entry_managing_and_viewing_ope_0632E", "cell.entry_managing_and_viewing_ope_08E38" ] }, { "row.row_managing_and_viewing_ope_00BB7": [ "cell.entry_managing_and_viewing_ope_03BB0", "cell.entry_managing_and_viewing_ope_03D77", "cell.entry_managing_and_viewing_ope_02CC6" ] }, { "row.row_managing_and_viewing_ope_0EF9C": [ "cell.entry_managing_and_viewing_ope_0A296", "cell.entry_managing_and_viewing_ope_0B236", "cell.entry_managing_and_viewing_ope_038D6" ] } ] }, "content.title_managing_and_viewing_ope_03D64", { "dl.dl_managing_and_viewing_ope_0A075": [ { "dlentry.dlentry_managing_and_viewing_ope_0B40D": [ "content.dt_managing_and_viewing_ope_03D0B", "content.dd_managing_and_viewing_ope_0876C" ] }, { "dlentry.dlentry_managing_and_viewing_ope_024F6": [ "content.dt_managing_and_viewing_ope_0D5A8", "content.dd_managing_and_viewing_ope_04DE7" ] } ] }, "content.note_managing_and_viewing_ope_0225F" ] }, "managing_open_requests-latest-en.json": { "title": "title_adding_and_sending_comme_0C076", "title_adding_and_sending_comme_0C076": "Add and View Comments", "shortdesc": "shortdesc_adding_and_sending_comme_0ACDA", "shortdesc_adding_and_sending_comme_0ACDA": "Check your open requests and send comments to WithSecure from the Elements Security Center.", "content.p_adding_and_sending_comme_09AF8": "On the Requests page in the Elements Security Center, you can review your open requests and exchange comments with WithSecure.", "step.step_adding_and_sending_comme_00ECF": "Log in to the Elements Security Center Portal", "step.step_adding_and_sending_comme_05786": "Go the Requests page on the menu on the left", "subchoice.choice_adding_and_sending_comme_04F7E": "check when the request was last updated from the Updated at column", "content.note_adding_and_sending_comme_004FA": "Note: To see the comments, either select the number in the Comments column or select the title of the request to open it and see all the comments. To send a new comment, go to the field at the bottom of the Comments tab and select Send Comment.", "content.note_adding_and_sending_comme_025FE": "Important: Screenshots or any other files cannot be added to comments, and comments added to closed requests are not reviewed by WithSecure.", "subchoice.choice_adding_and_sending_comme_09134": "check if the request has any comments from the Comments column . If a request has comments, the Comments column will show how many comments the request has.", "content.p_adding_and_sending_comme_07DC7": "", "step.step_adding_and_sending_comme_0AD24": "On the Requests page you can:", "desc": [ "content.p_adding_and_sending_comme_09AF8", { "steps.steps_adding_and_sending_comme_0C13E": [ "step.step_adding_and_sending_comme_00ECF", "step.step_adding_and_sending_comme_05786", "step.step_adding_and_sending_comme_0AD24", "content.p_adding_and_sending_comme_07DC7", { "subchoices.ul_adding_and_sending_comme_0917B": [ "subchoice.choice_adding_and_sending_comme_04F7E", "subchoice.choice_adding_and_sending_comme_09134", "content.note_adding_and_sending_comme_004FA", "content.note_adding_and_sending_comme_025FE" ] } ] } ] }, "verdicts_resolution-latest-en.json": { "title": "title_resolution_000001_9B2304DC", "title_resolution_000001_9B2304DC": "Resolution", "shortdesc": "shortdesc_resolution_000002_979AB598", "shortdesc_resolution_000002_979AB598": "While the selected reason for submission helps guide the investigation, verdicts are not assigned automatically. The final verdict always reflects the outcome of the analysis.", "content.p_resolution_000013_1E758CF4": "Example:
If a request is submitted as \"clean app was blocked\" but the analysis confirms the file is not clean,
the verdict will not be changed to \"clean.\"", "content.title_resolution_000015_84C49EB1": "How Endpoints Receive Updated Verdicts", "content.dt_resolution_000018_606243CE": "Security Cloud Engine", "content.dd_resolution_00001A_37961090": "", "content.dd_p_resolution_00001B_8FBF8284": "All submissions receive a verdict through the WithSecure Security Cloud. If an incorrect verdict has been cached on an endpoint, the device will automatically refresh the verdict once the cache TTL (time-to-live) expires.
", "choice.choice_resolution_000020_8FD64650": "If Security Cloud initially returned an incorrect verdict, the endpoint may continue blocking the file until the cached verdict expires.", "choice.choice_resolution_000022_45E7F577": "To speed up correction, we recommend clearing the WithSecure reputation cache on the affected device.", "content.dt_resolution_000025_0DD9CE46": "Local Virus Definitions", "content.p_resolution_000027_628B0C0B": "Detection updates are also delivered through local virus definition updates.
", "content.p_resolution_000028_3644011C": "These updates are distributed automatically to endpoints as soon as new versions are available.
", "content.p_resolution_000029_9A21CC46": "There is no SLA for engine or definition release timing, as updates are published continuously based on threat intelligence findings.", "desc": [ "content.p_resolution_000013_1E758CF4", "content.title_resolution_000015_84C49EB1", { "dl.dl_resolution_000016_F03A59FD": [ { "dlentry.dlentry_resolution_000017_65A19D1C": [ "content.dt_resolution_000018_606243CE", "content.dd_resolution_00001A_37961090", "content.dd_p_resolution_00001B_8FBF8284", { "choices.ul_resolution_00001F_CB6F3B0E": [ "choice.choice_resolution_000020_8FD64650", "choice.choice_resolution_000022_45E7F577" ] } ] }, { "dlentry.dlentry_resolution_000024_3E4668E9": [ "content.dt_resolution_000025_0DD9CE46", "content.p_resolution_000027_628B0C0B", "content.p_resolution_000028_3644011C", "content.p_resolution_000029_9A21CC46" ] } ] } ] }, "support_and_escalations-latest-en.json": { "title": "title_support_and_escalations_005E50", "title_support_and_escalations_005E50": "Support and escalations", "shortdesc": "shortdesc_support_and_escalations_002E57", "shortdesc_support_and_escalations_002E57": "When you encounter issues with the WithSecure Sample Validation service, choose the correct channel for reporting them or obtaining assistance.", "content.title_support_and_escalations_00A5D2": "Support escalation channels", "cell.entry_support_and_escalations_00DE4D": "Issue", "cell.entry_support_and_escalations_006CD0": "Channel to report", "cell.entry_support_and_escalations_00AA0C": "Login issues", "cell.entry_support_and_escalations_0095F0": "Contact WithSecure support.", "cell.entry_support_and_escalations_00D608": "User interface front-end issues", "cell.entry_support_and_escalations_00BD72": "Contact WithSecure support.", "cell.entry_support_and_escalations_00B286": "Request investigation", "cell.entry_support_and_escalations_000CE8": "Use the comments under your requests in Elements.", "cell.entry_support_and_escalations_005C56": "Suspected major false positive", "cell.entry_support_and_escalations_0093D9": "Contact WithSecure support.", "desc": [ "content.title_support_and_escalations_00A5D2", { "table.table_support-escalation-channels": [ { "thead.thead_support_and_escalations_00E987": [ "cell.entry_support_and_escalations_00DE4D", "cell.entry_support_and_escalations_006CD0" ] }, { "row.row_support_and_escalations_00636A": [ "cell.entry_support_and_escalations_00AA0C", "cell.entry_support_and_escalations_0095F0" ] }, { "row.row_support_and_escalations_00B970": [ "cell.entry_support_and_escalations_00D608", "cell.entry_support_and_escalations_00BD72" ] }, { "row.row_support_and_escalations_0083EC": [ "cell.entry_support_and_escalations_00B286", "cell.entry_support_and_escalations_000CE8" ] }, { "row.row_support_and_escalations_00FF1A": [ "cell.entry_support_and_escalations_005C56", "cell.entry_support_and_escalations_0093D9" ] } ] } ] }, "other_submissions-latest-en.json": { "title": "title_other_submissions_000001_F2C7C", "title_other_submissions_000001_F2C7C": "Other submissions", "shortdesc": "shortdesc_other_submissions_000002_78FFC", "shortdesc_other_submissions_000002_78FFC": "Some WithSecure products let you report false positives and false negatives directly from the product user interface.", "content.p_other_submissions_000012_BF130": "Examples of products and interfaces that support in-product reporting include:", "content.p_other_submissions_000016_191D1": "Provides reporting capabilities for false positives and false negatives directly within the analytics dashboard.", "step.step_other_submissions_000014_59C16": "WithSecure Cloud Protection for Salesforce Analytics", "content.p_other_submissions_000019_874BC": "Allows administrators to submit false positive reports directly from the Security Events view in the Elements Portal.", "step.step_other_submissions_000017_7B329": "Report False Positive from Elements Security Events", "content.p_other_submissions_00001D_EDF89": "Some WithSecure products include dedicated Report False Positive options within their user interfaces—for example:", "subchoice.choice_other_submissions_000021_1254E": "Browsing Protection", "content.p_other_submissions_000025_B5ACF": "These options enable quick submission of incorrectly detected files, URLs, or events without leaving the product.", "subchoice.choice_other_submissions_000023_249F3": "Quarantine views or dialogs", "step.step_other_submissions_00001B_0A01C": "In-Product False Positive Reporting", "content.note_other_submissions_000026_9E31E": "Note: The built-in reporting samples are processed by the same Sample Validation service. However, users will not receive feedback, status updates, or tracking details for these submissions. Despite the lack of visibility, all reported samples are handled with the same priority and care as requests submitted through the Elements portal.", "desc": [ "content.p_other_submissions_000012_BF130", { "steps.ul_other_submissions_000013_86D58": [ "step.step_other_submissions_000014_59C16", "content.p_other_submissions_000016_191D1", "step.step_other_submissions_000017_7B329", "content.p_other_submissions_000019_874BC", "step.step_other_submissions_00001B_0A01C", "content.p_other_submissions_00001D_EDF89", { "subchoices.ul_other_submissions_000020_03E8B": [ "subchoice.choice_other_submissions_000021_1254E", "subchoice.choice_other_submissions_000023_249F3", "content.p_other_submissions_000025_B5ACF" ] } ] }, "content.note_other_submissions_000026_9E31E" ] }, "best_practices_for_gathering_samples_and_reporting_ransomware-latest-en.json": { "title": "title_best_practices_for_gathe_08F90", "title_best_practices_for_gathe_08F90": "Best practices for gathering samples and reporting ransomware", "shortdesc": "shortdesc_best_practices_for_gathe_05AD9", "shortdesc_best_practices_for_gathe_05AD9": "In this section you will find the instructions for a safe file sample gathering for WithSecure Sample Validation Request Service. ", "content.p_best_practices_for_gathe_03D16": "This section explains how to gather file, URL, and email samples safely on each platform, and how to report ransomware or active threats that were not detected.", "desc": [ "content.p_best_practices_for_gathe_03D16" ] }, "how_to_gather_a_file_samples-latest-en.json": { "title": "title_how_to_gather_a_file_sam_065EA", "title_how_to_gather_a_file_sam_065EA": "Gathering file samples", "shortdesc": "shortdesc_how_to_gather_a_file_sam_08508", "shortdesc_how_to_gather_a_file_sam_08508": "Collect file samples for submission to the WithSecure Sample Validation service on Windows, Linux, macOS, and Android.", "content.p_how_to_gather_a_file_sam_00D2B": "Choose the procedure for your platform to safely collect and package a file sample for submission.", "desc": [ "content.p_how_to_gather_a_file_sam_00D2B" ] }, "gathering_a_file_sample_for_windows-latest-en.json": { "title": "title_gathering_a_file_sample__06B71", "title_gathering_a_file_sample__06B71": "Gather a File Sample for Windows", "shortdesc": "shortdesc_gathering_a_file_sample__02F67", "shortdesc_gathering_a_file_sample__02F67": "Collect a file sample on Windows and submit it for validation in the Elements Security Center.", "content.p_gathering_a_file_sample__0133A": "Before you submit a suspicious file to WithSecure, package it in a password-protected archive so security analysts can handle it safely.", "step.step_gathering_a_file_sample__0DBFA": "Find the file you want to submit", "step.step_gathering_a_file_sample__09F13": "Right-click the file Send to > Compressed (zipped) folder .", "content.p_gathering_a_file_sample__054E9": "You can do this using tools like 7-Zip or WinRAR)", "step.step_gathering_a_file_sample__0C1CA": "Open the ZIP file and add a password: infected", "step.step_gathering_a_file_sample__0272B": "When creating a new Request in Elements Security Center, attach the ZIP file", "content.p_gathering_a_file_sample__0FF63": "Remember to still create a request in Elements and include in a comment that the sample was sent via Dropzone.", "subchoice.choice_gathering_a_file_sample__09F9F": "Always use the password infected — this ensures safe handling by security analysts.", "subchoice.choice_gathering_a_file_sample__05D1C": "Never email the file directly. Always upload it through Elements Security Center or the Dropzone in case of sample being larger then 100MB", "subchoice.choice_gathering_a_file_sample__0F945": "Include as much context as possible (where the file came from, what it does, and why you're submitting it).", "content.p_gathering_a_file_sample__0B597": "", "step.step_gathering_a_file_sample__09C72": "If the file is larger than the upload limit, upload it via the Dropzone", "desc": [ "content.p_gathering_a_file_sample__0133A", { "steps.steps_gathering_a_file_sample__03F0D": [ "step.step_gathering_a_file_sample__0DBFA", "step.step_gathering_a_file_sample__09F13", "step.step_gathering_a_file_sample__0C1CA", "content.p_gathering_a_file_sample__054E9", "step.step_gathering_a_file_sample__0272B", "step.step_gathering_a_file_sample__09C72", "content.p_gathering_a_file_sample__0FF63", "content.p_gathering_a_file_sample__0B597", { "subchoices.ul_gathering_a_file_sample__0378D": [ "subchoice.choice_gathering_a_file_sample__09F9F", "subchoice.choice_gathering_a_file_sample__05D1C", "subchoice.choice_gathering_a_file_sample__0F945" ] } ] } ] }, "gathering_a_file_sample_for_macos-latest-en.json": { "title": "title_gathering_a_file_sample__0EE2A", "title_gathering_a_file_sample__0EE2A": "Gather a File Sample for macOS", "shortdesc": "shortdesc_gathering_a_file_sample__09B4B", "shortdesc_gathering_a_file_sample__09B4B": "Collect a file sample on macOS and submit it for validation in the Elements Security Center.", "content.p_gathering_a_file_sample__0489A": "Before you submit a suspicious file to WithSecure, package it in a password-protected archive so security analysts can handle it safely.", "step.step_gathering_a_file_sample__0D4EF": "Locate the file in Finder", "step.step_gathering_a_file_sample__0BFF1": "Right-click Compress \"[filename] to create a ZIP archive.", "content.p_gathering_a_file_sample__041DD": "Example Terminal Command: zip -e sample.zip /path/to/file
", "step.step_gathering_a_file_sample__08D23": "Use terminal or a tool like Keka to add a password: infected", "step.step_gathering_a_file_sample__0E3C2": "When creating a new Request in Elements Security Center, attach the ZIP file", "content.p_gathering_a_file_sample__0B665": "Remember to still create a request in Elements and include in a comment that the sample was sent via Dropzone.", "subchoice.choice_gathering_a_file_sample__00B97": "Always use the password infected - this ensures safe handling by security analysts.", "subchoice.choice_gathering_a_file_sample__0A343": "Never email the file directly. Always upload it through Elements Security Center or the Dropzone in case of sample being larger then 100MB", "subchoice.choice_gathering_a_file_sample__07E0C": "Include as much context as possible (where the file came from, what it does, and why you're submitting it).", "content.p_gathering_a_file_sample__063BE": "", "step.step_gathering_a_file_sample__01C2D": "If the file is larger than the upload limit, upload it via the Dropzone", "desc": [ "content.p_gathering_a_file_sample__0489A", { "steps.steps_gathering_a_file_sample__08885": [ "step.step_gathering_a_file_sample__0D4EF", "step.step_gathering_a_file_sample__0BFF1", "step.step_gathering_a_file_sample__08D23", "content.p_gathering_a_file_sample__041DD", "step.step_gathering_a_file_sample__0E3C2", "step.step_gathering_a_file_sample__01C2D", "content.p_gathering_a_file_sample__0B665", "content.p_gathering_a_file_sample__063BE", { "subchoices.ul_gathering_a_file_sample__01A9D": [ "subchoice.choice_gathering_a_file_sample__00B97", "subchoice.choice_gathering_a_file_sample__0A343", "subchoice.choice_gathering_a_file_sample__07E0C" ] } ] } ] }, "gathering_a_file_sample_for_linux-latest-en.json": { "title": "title_gathering_a_file_sample__0454C", "title_gathering_a_file_sample__0454C": "Gather a File Sample for Linux", "shortdesc": "shortdesc_gathering_a_file_sample__03E87", "shortdesc_gathering_a_file_sample__03E87": "Collect a file sample on Linux and submit it for validation in the Elements Security Center.", "content.p_gathering_a_file_sample__06F55": "Before you submit a suspicious file to WithSecure, package it in a password-protected archive so security analysts can handle it safely.", "step.step_gathering_a_file_sample__09016": "Locate the file you want to submit", "content.p_gathering_a_file_sample__033E1": "zip -e sample.zip /path/to/file
", "content.p_gathering_a_file_sample__0F02D": "When prompted, enter the password: infected", "step.step_gathering_a_file_sample__02F25": "Open Terminal and run:", "step.step_gathering_a_file_sample__0C41A": "When creating a new Request in Elements Security Center, attach the ZIP file", "content.p_gathering_a_file_sample__0FE06": "Remember to still create a request in Elements and include in a comment that the sample was sent via Dropzone.", "subchoice.choice_gathering_a_file_sample__07CCD": "Always use the password infected - this ensures safe handling by security analysts.", "subchoice.choice_gathering_a_file_sample__02916": "Never email the file directly. Always upload it through Elements Security Center or the Dropzone in case of sample being larger then 100MB", "subchoice.choice_gathering_a_file_sample__02A07": "Include as much context as possible (where the file came from, what it does, and why you're submitting it).", "content.p_gathering_a_file_sample__03E23": "", "step.step_gathering_a_file_sample__02386": "If the file is larger than the upload limit, upload it via the Dropzone", "desc": [ "content.p_gathering_a_file_sample__06F55", { "steps.steps_gathering_a_file_sample__0F277": [ "step.step_gathering_a_file_sample__09016", "step.step_gathering_a_file_sample__02F25", "content.p_gathering_a_file_sample__033E1", "content.p_gathering_a_file_sample__0F02D", "step.step_gathering_a_file_sample__0C41A", "step.step_gathering_a_file_sample__02386", "content.p_gathering_a_file_sample__0FE06", "content.p_gathering_a_file_sample__03E23", { "subchoices.ul_gathering_a_file_sample__03173": [ "subchoice.choice_gathering_a_file_sample__07CCD", "subchoice.choice_gathering_a_file_sample__02916", "subchoice.choice_gathering_a_file_sample__02A07" ] } ] } ] }, "collecting_quarantined_files_dumper_tool-latest-en.json": { "title": "title_collecting_quarantined_f_00924", "title_collecting_quarantined_f_00924": "Collect quarantined files using Quarantine Dumper Tool", "shortdesc": "shortdesc_collecting_quarantined_f_00242", "shortdesc_collecting_quarantined_f_00242": "Collect quarantined files with the WithSecure Quarantine Dumper tool so you can submit them for validation.", "content.p_collecting_quarantined_f_06596": "The WithSecure Quarantine Dumper is a command-line tool that gathers quarantined files into a password-protected archive for submission.", "subchoice.choice_collecting_quarantined_f_012AD": "32bit version", "subchoice.choice_collecting_quarantined_f_0DC1F": "64bit version:", "content.p_collecting_quarantined_f_0A1D7": "", "step.step_collecting_quarantined_f_0867B": "Download the tool and save it to a location of your choice, for example : c:\\temp:", "step.step_collecting_quarantined_f_08DDA": "Launch Command Prompt (CMD)", "content.p_collecting_quarantined_f_06383": "For example, type cd c:\\temp\\ and press Enter on your keyboard to go to c:\\temp\\ folder.", "step.step_collecting_quarantined_f_0D658": "Navigate the directory to the location you selected in step 1.", "step.step_collecting_quarantined_f_07F2E": "Type wsdumpqrt.exe -d c:\\temp\\ to run the tool.", "step.step_collecting_quarantined_f_0D53B": "Enter your administrator credentials when prompted. WithSecure license terms are now shown.", "step.step_collecting_quarantined_f_08D06": "Scroll all the way to the end of the license terms before you can accept them.", "step.step_collecting_quarantined_f_04649": "Press E on your keyboard to accept the license terms.", "subchoice.choice_collecting_quarantined_f_080A6": "-d, --destination: Destination directory for output (default: current admin desktop)", "subchoice.choice_collecting_quarantined_f_049BB": "-p, --password: Password for output (default: \"infected\")", "subchoice.choice_collecting_quarantined_f_0ADE5": "-v, --verbose: Verbose output", "subchoice.choice_collecting_quarantined_f_0170C": "-a, --accept-eula: Accept EULA", "subchoice.choice_collecting_quarantined_f_01ECC": "-s, --silent: Silent mode", "subchoice.choice_collecting_quarantined_f_0BEAB": "-l, --list: Only list contents, nothing is written to disk", "content.p_collecting_quarantined_f_05A26": "The quarantined files will be collected in a file named malware_samples.zip with the default password infected in the location you specified in step 1. These are the parameters that can be used in the tool:", "content.note_collecting_quarantined_f_01C0E": "Tip: Running the wsdumpqrt.exe tool in command prompt without additional command line parameters will print out a short tool description and the extra parameters for using the tool.", "step.step_collecting_quarantined_f_0B2BA": "Press any key to complete the run.", "desc": [ "content.p_collecting_quarantined_f_06596", { "steps.steps_collecting_quarantined_f_0408A": [ "step.step_collecting_quarantined_f_0867B", "content.p_collecting_quarantined_f_0A1D7", { "subchoices.ul_collecting_quarantined_f_03FCC": [ "subchoice.choice_collecting_quarantined_f_012AD", "subchoice.choice_collecting_quarantined_f_0DC1F" ] }, "step.step_collecting_quarantined_f_08DDA", "step.step_collecting_quarantined_f_0D658", "content.p_collecting_quarantined_f_06383", "step.step_collecting_quarantined_f_07F2E", "step.step_collecting_quarantined_f_0D53B", "step.step_collecting_quarantined_f_08D06", "step.step_collecting_quarantined_f_04649", "step.step_collecting_quarantined_f_0B2BA", "content.p_collecting_quarantined_f_05A26", { "subchoices.ul_collecting_quarantined_f_05B6B": [ "subchoice.choice_collecting_quarantined_f_080A6", "subchoice.choice_collecting_quarantined_f_049BB", "subchoice.choice_collecting_quarantined_f_0ADE5", "subchoice.choice_collecting_quarantined_f_0170C", "subchoice.choice_collecting_quarantined_f_01ECC", "subchoice.choice_collecting_quarantined_f_0BEAB" ] }, "content.note_collecting_quarantined_f_01C0E" ] } ] }, "how_to_gather_a_url_samples-latest-en.json": { "title": "title_how_to_gather_a_url_samp_00A16", "title_how_to_gather_a_url_samp_00A16": "Gathering URL samples", "shortdesc": "shortdesc_how_to_gather_a_url_samp_0A138", "shortdesc_how_to_gather_a_url_samp_0A138": "Collect URL samples for submission to the WithSecure Sample Validation service on Windows, Linux, and macOS.", "content.p_how_to_gather_a_url_samp_0E214": "Choose the procedure for your platform to capture and package a URL sample for submission.", "desc": [ "content.p_how_to_gather_a_url_samp_0E214" ] }, "how_to_gather_a_url_sample_windows_macos_linux-latest-en.json": { "title": "title_gathering_a_url_sample_f_0B6D0", "title_gathering_a_url_sample_f_0B6D0": "Gather a URL sample for Windows ", "shortdesc": "shortdesc_gathering_a_url_sample_f_0E990", "shortdesc_gathering_a_url_sample_f_0E990": "Collect a URL sample on Windows and submit it for validation in the Elements Security Center.", "content.p_gathering_a_url_sample_f_05243": "Copy or paste the exact URL rather than clicking it, so analysts can assess the link without exposing your device to risk.", "step.step_gathering_a_url_sample_f_078A0": "Copy the exact URL from your browser's address bar or from the email/message where it appeared.", "step.step_gathering_a_url_sample_f_04FDD": "If available, also collect the full email header that contained the URL (for phishing cases).", "step.step_gathering_a_url_sample_f_0767F": "Paste the URL and a short description of its behavior (e.g., \"Phishing site not blocked\" or \"Suspicious download link\") into your new Request in Elements Security Center.", "content.note_gathering_a_url_sample_f_003BD": "Warning: Do not click suspicious links before or after collecting them.", "subchoice.choice_gathering_a_url_sample_f_00C1D": "Always include the complete URL, even if it's long.", "subchoice.choice_gathering_a_url_sample_f_0CA4D": "Provide context (where you saw it, what happened, and which product didn't block it).", "subchoice.choice_gathering_a_url_sample_f_09CA4": "If the URL was part of a large email sample or multiple links, you can upload related files (like .eml) through the Customer Protection Dropzone: Dropzone.", "content.p_gathering_a_url_sample_f_0DF1F": "Example:
1. https://maliciousdomain.net/login.php
2. Behavior: Phishing page not blocked by Elements Agent", "content.p_gathering_a_url_sample_f_0A3CC": "", "step.step_gathering_a_url_sample_f_0D4C7": "If the URL is inside an email, save that email as a .msg or .eml file and attach it to your request.", "desc": [ "content.p_gathering_a_url_sample_f_05243", { "steps.steps_gathering_a_url_sample_f_023D3": [ "step.step_gathering_a_url_sample_f_078A0", "step.step_gathering_a_url_sample_f_04FDD", "step.step_gathering_a_url_sample_f_0767F", "step.step_gathering_a_url_sample_f_0D4C7", "content.p_gathering_a_url_sample_f_0A3CC", { "subchoices.ul_gathering_a_url_sample_f_091FB": [ "subchoice.choice_gathering_a_url_sample_f_00C1D", "content.note_gathering_a_url_sample_f_003BD", "subchoice.choice_gathering_a_url_sample_f_0CA4D", "subchoice.choice_gathering_a_url_sample_f_09CA4" ] }, "content.p_gathering_a_url_sample_f_0DF1F" ] } ] }, "gathering_a_url_sample_for_macos-latest-en.json": { "title": "title_gathering_a_url_sample_f_09D2F", "title_gathering_a_url_sample_f_09D2F": "Gather a URL sample for macOS ", "shortdesc": "shortdesc_gathering_a_url_sample_f_013DE", "shortdesc_gathering_a_url_sample_f_013DE": "Collect a URL sample on macOS and submit it for validation in the Elements Security Center.", "content.p_gathering_a_url_sample_f_05801": "Copy or paste the exact URL rather than clicking it, so analysts can assess the link without exposing your device to risk.", "step.step_gathering_a_url_sample_f_00E5C": "Right-click or copy the link directly from Safari, mail or another app.", "step.step_gathering_a_url_sample_f_0E2A6": "Paste the exact URL into your new Request in Elements Security Center.", "step.step_gathering_a_url_sample_f_0139D": "Add a short note describing what you observed (for example, Leads to fake login page).", "substep.substep_gathering_a_url_sample_f_01BEC": "In Mail: select the email File > Save As… > Format: Raw Message Source (.eml .", "substep.substep_gathering_a_url_sample_f_09F0E": "Then attach that file to your request.", "content.note_gathering_a_url_sample_f_0699D": "Warning: Do not click suspicious links before or after collecting them.", "subchoice.choice_gathering_a_url_sample_f_0B9D3": "Always include the complete URL, even if it's long.", "subchoice.choice_gathering_a_url_sample_f_0D964": "Provide context (where you saw it, what happened, and which product didn't block it).", "subchoice.choice_gathering_a_url_sample_f_05E6E": "If the URL was part of a large email sample or multiple links, you can upload related files (like .eml) through the Customer Protection Dropzone: Dropzone", "content.p_gathering_a_url_sample_f_017D7": "Example:
1. https://maliciousdomain.net/login.php
2. Behavior: Phishing page not blocked by Elements Agent", "content.p_gathering_a_url_sample_f_054E4": "", "step.step_gathering_a_url_sample_f_0B625": "If it came from an email, save the message as an .eml file:", "desc": [ "content.p_gathering_a_url_sample_f_05801", { "steps.steps_gathering_a_url_sample_f_02148": [ "step.step_gathering_a_url_sample_f_00E5C", "step.step_gathering_a_url_sample_f_0E2A6", "step.step_gathering_a_url_sample_f_0139D", "step.step_gathering_a_url_sample_f_0B625", { "substeps.substepsalpha_gatheringalpha_aalpha_urlalpha_samplealpha_falpha_01742": [ "substep.substep_gathering_a_url_sample_f_01BEC", "substep.substep_gathering_a_url_sample_f_09F0E" ] }, "content.p_gathering_a_url_sample_f_054E4", { "subchoices.ul_gathering_a_url_sample_f_0CB26": [ "subchoice.choice_gathering_a_url_sample_f_0B9D3", "content.note_gathering_a_url_sample_f_0699D", "subchoice.choice_gathering_a_url_sample_f_0D964", "subchoice.choice_gathering_a_url_sample_f_05E6E" ] }, "content.p_gathering_a_url_sample_f_017D7" ] } ] }, "gathering_a_url_sample_for_linux-latest-en.json": { "title": "title_gathering_a_url_sample_f_01868", "title_gathering_a_url_sample_f_01868": "Gather a URL sample for Linux ", "shortdesc": "shortdesc_gathering_a_url_sample_f_0D4AB", "shortdesc_gathering_a_url_sample_f_0D4AB": "Collect a URL sample on Linux and submit it for validation in the Elements Security Center.", "content.p_gathering_a_url_sample_f_014AD": "Copy or paste the exact URL rather than clicking it, so analysts can assess the link without exposing your device to risk.", "step.step_gathering_a_url_sample_f_00890": "Right-click or copy the link directly from Safari, mail or another app.", "step.step_gathering_a_url_sample_f_0EED0": "Paste the exact URL into your new Request in Elements Security Center.", "step.step_gathering_a_url_sample_f_02082": "Add a short note describing what you observed (for example, Leads to fake login page).", "content.p_gathering_a_url_sample_f_03032": "Example: (Thunderbird): File > Save > As > File (eml).", "content.note_gathering_a_url_sample_f_0F445": "Warning: Do not click suspicious links before or after collecting them.", "subchoice.choice_gathering_a_url_sample_f_089FB": "Always include the complete URL, even if it's long.", "subchoice.choice_gathering_a_url_sample_f_00D6C": "Provide context (where you saw it, what happened, and which product didn't block it).", "subchoice.choice_gathering_a_url_sample_f_0E480": "If the URL was part of a large email sample or multiple links, you can upload related files (like .eml) through the Customer Protection Dropzone:Dropzone", "content.p_gathering_a_url_sample_f_02FAC": "Example:
1. https://maliciousdomain.net/login.php
2. Behavior: Phishing page not blocked by Elements Agent", "content.p_gathering_a_url_sample_f_0CBF2": "", "step.step_gathering_a_url_sample_f_00188": "If it came from an email, save the message as an .eml file and attach it to your request.", "desc": [ "content.p_gathering_a_url_sample_f_014AD", { "steps.steps_gathering_a_url_sample_f_07FD2": [ "step.step_gathering_a_url_sample_f_00890", "step.step_gathering_a_url_sample_f_0EED0", "step.step_gathering_a_url_sample_f_02082", "step.step_gathering_a_url_sample_f_00188", "content.p_gathering_a_url_sample_f_03032", "content.p_gathering_a_url_sample_f_0CBF2", { "subchoices.ul_gathering_a_url_sample_f_07C48": [ "subchoice.choice_gathering_a_url_sample_f_089FB", "content.note_gathering_a_url_sample_f_0F445", "subchoice.choice_gathering_a_url_sample_f_00D6C", "subchoice.choice_gathering_a_url_sample_f_0E480" ] }, "content.p_gathering_a_url_sample_f_02FAC" ] } ] }, "how_to_gather_an_email_sample-latest-en.json": { "title": "title_how_to_gather_an_email_s_09F9D", "title_how_to_gather_an_email_s_09F9D": "Gathering email samples", "shortdesc": "shortdesc_how_to_gather_an_email_s_0E366", "shortdesc_how_to_gather_an_email_s_0E366": "Collect email samples for submission to the WithSecure Sample Validation service on Windows, Linux, and macOS.", "content.p_how_to_gather_an_email_s_09903": "Choose the procedure for your platform to export and package an email sample for submission.", "desc": [ "content.p_how_to_gather_an_email_s_09903" ] }, "gathering_an_email_sample_windows-latest-en.json": { "title": "title_gathering_an_email_sampl_0CDAE", "title_gathering_an_email_sampl_0CDAE": "Gather an Email Sample for Windows", "shortdesc": "shortdesc_gathering_an_email_sampl_0E8D2", "shortdesc_gathering_an_email_sampl_0E8D2": "Collect an email sample on Windows and submit it for validation in the Elements Security Center.", "content.p_gathering_an_email_sampl_01FB5": "Save the suspicious email as a file rather than forwarding it, so its technical headers are preserved for analysis.", "step.step_gathering_an_email_sampl_0E157": "Open the suspicious email in Outlook or your mail client.", "subchoice.choice_gathering_an_email_sampl_0ACB2": "In Outlook desktop: open the email File > Save As > Outlook Message Format (.msg).", "subchoice.choice_gathering_an_email_sampl_078E4": "In Outlook Web: open the message and select View message details and copy or download the full headers, if available.", "content.p_gathering_an_email_sampl_0A3A9": "", "step.step_gathering_an_email_sampl_0840E": "Save the message as .msg or .eml file.", "step.step_gathering_an_email_sampl_0B203": "When creating a new Request in Elements Security Center, attach your email file", "subchoice.choice_gathering_an_email_sampl_09919": "Always save and attach the email as a file (.eml or .msg) — do not forward it. Forwarding can remove important technical headers that are needed for analysis.", "subchoice.choice_gathering_an_email_sampl_0607E": "Include any context: how you received it, if you clicked any links, and whether any alerts appeared.", "subchoice.choice_gathering_an_email_sampl_00DDC": "For large attachments or multiple samples, use the Customer Protection Dropzone and mention it in your request: Dropzone", "content.p_gathering_an_email_sampl_0EB9E": "", "step.step_gathering_an_email_sampl_03882": "Include any relevant details, such as the subject line, sender address and a short note about what you observed (e.g. Phishing email not detected by Elements Agent).", "content.title_gathering_an_email_sampl_0D990": "Example submission", "content.p_gathering_an_email_sampl_05EF0": "
Subject: Invoice due today
From: billing@fakevendor.com
Attachment: invoice_8845.zip
Behavior: Suspicious attachment not detected by Elements Agent", "desc": [ "content.p_gathering_an_email_sampl_01FB5", { "steps.steps_gathering_an_email_sampl_03608": [ "step.step_gathering_an_email_sampl_0E157", "step.step_gathering_an_email_sampl_0840E", "content.p_gathering_an_email_sampl_0A3A9", { "subchoices.ul_gathering_an_email_sampl_022CF": [ "subchoice.choice_gathering_an_email_sampl_0ACB2", "subchoice.choice_gathering_an_email_sampl_078E4" ] }, "step.step_gathering_an_email_sampl_0B203", "step.step_gathering_an_email_sampl_03882", "content.p_gathering_an_email_sampl_0EB9E", { "subchoices.ul_gathering_an_email_sampl_0EAFE": [ "subchoice.choice_gathering_an_email_sampl_09919", "subchoice.choice_gathering_an_email_sampl_0607E", "subchoice.choice_gathering_an_email_sampl_00DDC" ] } ] }, "content.title_gathering_an_email_sampl_0D990", "content.p_gathering_an_email_sampl_05EF0" ] }, "gathering_an_email_sample_macos-latest-en.json": { "title": "title_gathering_an_email_sampl_068A3", "title_gathering_an_email_sampl_068A3": "Gather an Email Sample for macOS", "shortdesc": "shortdesc_gathering_an_email_sampl_0A34D", "shortdesc_gathering_an_email_sampl_0A34D": "Collect an email sample on macOS and submit it for validation in the Elements Security Center.", "content.p_gathering_an_email_sampl_0F985": "Save the suspicious email as a file rather than forwarding it, so its technical headers are preserved for analysis.", "step.step_gathering_an_email_sampl_0262B": "Open the suspicious email in the Mail app.", "step.step_gathering_an_email_sampl_03238": "Select the email, then click File > Save As...", "step.step_gathering_an_email_sampl_0F822": "When creating a new Request in Elements Security Center, attach your saved .eml file.", "subchoice.choice_gathering_an_email_sampl_09FD2": "Always save and attach the email as a file (.eml or .msg) — do not forward it. Forwarding can remove important technical headers that are needed for analysis.", "subchoice.choice_gathering_an_email_sampl_02516": "Include any context: how you received it, if you clicked any links, and whether any alerts appeared.", "subchoice.choice_gathering_an_email_sampl_068D7": "For large attachments or multiple samples, use the Customer Protection Dropzone and mention it in your request: Dropzone.", "content.p_gathering_an_email_sampl_03639": "", "step.step_gathering_an_email_sampl_08C97": "Include any relevant details, such as the subject line, sender address and a short note about what you observed (e.g. Fake invoice email with suspicious link).", "content.title_gathering_an_email_sampl_0EFC6": "Example submission", "content.p_gathering_an_email_sampl_0901B": "
Subject: Invoice due today
From: billing@fakevendor.com
Attachment: invoice_8845.zip
Behavior: Suspicious attachment not detected by Elements Agent", "desc": [ "content.p_gathering_an_email_sampl_0F985", { "steps.steps_gathering_an_email_sampl_029BE": [ "step.step_gathering_an_email_sampl_0262B", "step.step_gathering_an_email_sampl_03238", "step.step_gathering_an_email_sampl_0F822", "step.step_gathering_an_email_sampl_08C97", "content.p_gathering_an_email_sampl_03639", { "subchoices.ul_gathering_an_email_sampl_0B648": [ "subchoice.choice_gathering_an_email_sampl_09FD2", "subchoice.choice_gathering_an_email_sampl_02516", "subchoice.choice_gathering_an_email_sampl_068D7" ] } ] }, "content.title_gathering_an_email_sampl_0EFC6", "content.p_gathering_an_email_sampl_0901B" ] }, "gathering_an_email_sample_linux-latest-en.json": { "title": "title_gathering_an_email_sampl_0461C", "title_gathering_an_email_sampl_0461C": "Gather an Email Sample for Linux", "shortdesc": "shortdesc_gathering_an_email_sampl_0D2CD", "shortdesc_gathering_an_email_sampl_0D2CD": "Collect an email sample on Linux and submit it for validation in the Elements Security Center.", "content.p_gathering_an_email_sampl_0987B": "Save the suspicious email as a file rather than forwarding it, so its technical headers are preserved for analysis.", "step.step_gathering_an_email_sampl_08899": "Open the suspicious email in the Mail app (for example: Thunderbird or Evolution).", "subchoice.choice_gathering_an_email_sampl_0595D": "In Thunderbird:: Select the email, then click File > Save As... > File..", "content.p_gathering_an_email_sampl_084D8": "", "step.step_gathering_an_email_sampl_03747": "Save the message as an .eml file.", "step.step_gathering_an_email_sampl_06271": "When creating a new Request in Elements Security Center, attach your saved .eml file.", "subchoice.choice_gathering_an_email_sampl_07B58": "Always save and attach the email as a file (.eml or .msg) — do not forward it. Forwarding can remove important technical headers that are needed for analysis.", "subchoice.choice_gathering_an_email_sampl_098E4": "Include any context: how you received it, if you clicked any links, and whether any alerts appeared.", "subchoice.choice_gathering_an_email_sampl_07E3A": "For large attachments or multiple samples, use the Customer Protection Dropzone and mention it in your request: Dropzone.", "content.p_gathering_an_email_sampl_0EBFA": "", "step.step_gathering_an_email_sampl_0C498": "Include any relevant details, such as the subject line, sender address and a short note about what you observed (e.g. Attachment attempts to download a file).", "content.title_gathering_an_email_sampl_03563": "Example submission", "content.p_gathering_an_email_sampl_0602B": "
Subject: Invoice due today
From: billing@fakevendor.com
Attachment: invoice_8845.zip
Behavior: Suspicious attachment not detected by Elements Agent", "desc": [ "content.p_gathering_an_email_sampl_0987B", { "steps.steps_gathering_an_email_sampl_0458B": [ "step.step_gathering_an_email_sampl_08899", "step.step_gathering_an_email_sampl_03747", "content.p_gathering_an_email_sampl_084D8", { "subchoices.ul_gathering_an_email_sampl_060BA": [ "subchoice.choice_gathering_an_email_sampl_0595D" ] }, "step.step_gathering_an_email_sampl_06271", "step.step_gathering_an_email_sampl_0C498", "content.p_gathering_an_email_sampl_0EBFA", { "subchoices.ul_gathering_an_email_sampl_0F2A7": [ "subchoice.choice_gathering_an_email_sampl_07B58", "subchoice.choice_gathering_an_email_sampl_098E4", "subchoice.choice_gathering_an_email_sampl_07E3A" ] } ] }, "content.title_gathering_an_email_sampl_03563", "content.p_gathering_an_email_sampl_0602B" ] }, "malicious_application_android-latest-en.json": { "title": "title_malicious_application_an_0CD45", "title_malicious_application_an_0CD45": "Report application recognized as malicious (Android)", "shortdesc": "shortdesc_malicious_application_an_02FDA", "shortdesc_malicious_application_an_02FDA": "If WithSecure Mobile Protection flags an application as malicious and you suspect a false positive, take a screenshot of the Infection details page and submit it as a file sample for review.", "step.step_malicious_application_an_004CA": "Open the WithSecure Mobile Protection application.", "step.step_malicious_application_an_0201C": "Open the Malware Protection section.", "step.step_malicious_application_an_0FEC5": "Click See full scan history.", "step.step_malicious_application_an_0F032": "Click on the detection that has the malicious application.", "subchoice.choice_malicious_application_an_016BE": "App name", "subchoice.choice_malicious_application_an_080EA": "Package name", "subchoice.choice_malicious_application_an_04B50": "Problems detected", "subchoice.choice_malicious_application_an_0DBA6": "Size", "content.p_malicious_application_an_0FAE0": "A window will open with the following details:", "step.step_malicious_application_an_06A26": "In the Infections section, click on the name of the application.", "content.p_malicious_application_an_06166": "In the description field of the submission, note that the attached screenshot shows the details of the Android application.", "step.step_malicious_application_an_0ED93": "Take a screenshot of the window and submit it as a file sample using Submit a file sample.", "desc": [ { "steps.steps_malicious_application_an_0BC11": [ "step.step_malicious_application_an_004CA", "step.step_malicious_application_an_0201C", "step.step_malicious_application_an_0FEC5", "step.step_malicious_application_an_0F032", "step.step_malicious_application_an_06A26", "content.p_malicious_application_an_0FAE0", { "subchoices.ul_malicious_application_an_0EFD1": [ "subchoice.choice_malicious_application_an_016BE", "subchoice.choice_malicious_application_an_080EA", "subchoice.choice_malicious_application_an_04B50", "subchoice.choice_malicious_application_an_0DBA6" ] }, "step.step_malicious_application_an_0ED93", "content.p_malicious_application_an_06166" ] } ] }, "reporting_ransomware_or_active_threats_no_detection_observed-latest-en.json": { "title": "title_reporting_ransomware_or__0B0FA", "title_reporting_ransomware_or__0B0FA": "Reporting ransomware or active threats (no detection observed)", "shortdesc": "shortdesc_reporting_ransomware_or__0AAD4", "shortdesc_reporting_ransomware_or__0AAD4": "In this section you will find guidance how to report ransomware or another active threat where no detection has been observed. ", "content.p_reporting_ransomware_or__04247": "Follow this guidance to report ransomware or another active threat on Windows, macOS, or Linux when your WithSecure product did not raise a detection, including the information to include in your report.", "desc": [ "content.p_reporting_ransomware_or__04247" ] }, "ransomware_or_active_threats_windows-latest-en.json": { "title": "title_ransomware_or_active_thr_0D5B4", "title_ransomware_or_active_thr_0D5B4": "Report Ransomware or Active Threats (No Detection Observed) Windows", "shortdesc": "shortdesc_ransomware_or_active_thr_0D8A1", "shortdesc_ransomware_or_active_thr_0D8A1": "Gather diagnostic information when WithSecure has not detected or blocked suspected ransomware or another active threat on a Windows system.", "content.p_ransomware_or_active_thr_03CEE": "If you suspect ransomware or another active threat on a Windows device that WithSecure has not detected, act immediately to contain it and report it.", "step.step_ransomware_or_active_thr_0EFD1": "Immediately isolate the affected system from the network to prevent the threat from spreading.", "step.step_ransomware_or_active_thr_0BC96": "Locate and collect a sample of the suspicious file, script, or process if possible (e.g. the ransomware executable, encrypted file, or note).", "step.step_ransomware_or_active_thr_080B5": "Do not attempt to run or analyze the file yourself.", "step.step_ransomware_or_active_thr_0CC07": "Compress the file into a ZIP archive and password-protect it using the password: infected.", "step.step_ransomware_or_active_thr_0E74B": "Submit the sample through a new Request in Elements Security Center.", "subchoice.choice_ransomware_or_active_thr_008CD": "When and how the threat appeared.", "subchoice.choice_ransomware_or_active_thr_06C9C": "What actions were taken by Elements (if any).", "content.p_ransomware_or_active_thr_0F05E": "", "step.step_ransomware_or_active_thr_0CB6C": "Include clear details, such as:", "step.step_ransomware_or_active_thr_0A403": "If the sample size exceeds upload limits, submit it via the Dropzone and include the link in your request.", "desc": [ "content.p_ransomware_or_active_thr_03CEE", { "steps.steps_ransomware_or_active_thr_0BF09": [ "step.step_ransomware_or_active_thr_0EFD1", "step.step_ransomware_or_active_thr_0BC96", "step.step_ransomware_or_active_thr_080B5", "step.step_ransomware_or_active_thr_0CC07", "step.step_ransomware_or_active_thr_0E74B", "step.step_ransomware_or_active_thr_0CB6C", "content.p_ransomware_or_active_thr_0F05E", { "subchoices.ul_ransomware_or_active_thr_0233C": [ "subchoice.choice_ransomware_or_active_thr_008CD", "subchoice.choice_ransomware_or_active_thr_06C9C" ] }, "step.step_ransomware_or_active_thr_0A403" ] } ] }, "ransomware_or_active_threats_macos_linux-latest-en.json": { "title": "title_ransomware_or_active_thr_0C9A4", "title_ransomware_or_active_thr_0C9A4": "Report Ransomware or Active Threats (No Detection Observed) macOS/Linux", "shortdesc": "shortdesc_ransomware_or_active_thr_03E1B", "shortdesc_ransomware_or_active_thr_03E1B": "Gather diagnostic information when WithSecure has not detected or blocked suspected ransomware or another active threat on a macOS or Linux system.", "content.p_ransomware_or_active_thr_0F056": "If you suspect ransomware or another active threat on a macOS or Linux device that WithSecure has not detected, act immediately to contain it and report it.", "step.step_ransomware_or_active_thr_0E81C": "Immediately isolate the affected device from the network (unplug Ethernet, turn off Wi-Fi).", "step.step_ransomware_or_active_thr_01D51": "Identify the suspicious file or process (for example, ransomware binary, dropped file, or ransom note).", "content.p_ransomware_or_active_thr_0D5AA": "Example command", "content.p_ransomware_or_active_thr_05DEE": "zip -e sample.zip /path/to/suspicious/file", "step.step_ransomware_or_active_thr_0B9E0": "Compress it into a ZIP archive and password-protect it using the password: infected.", "step.step_ransomware_or_active_thr_00FB8": "Submit the sample through a new Request in Elements Security Center.", "step.step_ransomware_or_active_thr_06F0D": "If the sample size exceeds upload limits, submit it via the Dropzone and include the link in your request.", "desc": [ "content.p_ransomware_or_active_thr_0F056", { "steps.steps_ransomware_or_active_thr_092F4": [ "step.step_ransomware_or_active_thr_0E81C", "step.step_ransomware_or_active_thr_01D51", "step.step_ransomware_or_active_thr_0B9E0", "content.p_ransomware_or_active_thr_0D5AA", "content.p_ransomware_or_active_thr_05DEE", "step.step_ransomware_or_active_thr_00FB8", "step.step_ransomware_or_active_thr_06F0D" ] } ] }, "information_to_include_for_ransomware-latest-en.json": { "title": "title_information_to_include_f_007C3", "title_information_to_include_f_007C3": "Provide information for ransomware reporting", "shortdesc": "shortdesc_information_to_include_f_0B667", "shortdesc_information_to_include_f_0B667": "Provide the information and files WithSecure needs to investigate your ransomware case thoroughly.", "content.p_information_to_include_f_032C2": "Providing complete data will speed up our analysis and response.", "content.dt_information_to_include_f_0A9D3": "What happened", "content.dd_information_to_include_f_0D6DC": "Describe the situation in detail (e.g., files encrypted, ransom note shown, system slowdowns, alerts triggered, etc.).", "content.dt_information_to_include_f_0AD8B": "When it happened", "content.dd_information_to_include_f_04C30": "Provide the exact date and time you first noticed the issue.", "content.dt_information_to_include_f_02983": "Where it happened", "content.dd_information_to_include_f_0A71F": "Mention the affected device(s) or system(s).", "content.p_information_to_include_f_01F98": "In your Request description in Elements Security Center, include:", "content.p_information_to_include_f_0223A": "Example: Files in the shared drive were encrypted around 10:45 on 2 November. A ransom note named \"README.txt\" appeared on all desktops.", "step.step_information_to_include_f_0D83A": "Describe the Incident.", "content.p_information_to_include_f_009C3": "We need a sample of the suspicious file (ransomware executable, script or note). Without this, we cannot proceed with the analysis.", "substep.substep_information_to_include_f_0629C": "Locate the suspicious file.", "substep.substep_information_to_include_f_03659": "Compress it into a ZIP file.", "substep.substep_information_to_include_f_01276": "Password-protect it using the password: infected", "substep.substep_information_to_include_f_0E49B": "Keep the ZIP file ready. You'll upload it together with your other diagnostic files via Dropzone.", "step.step_information_to_include_f_0C098": "Collect the suspicious sample.", "content.p_information_to_include_f_0A666": "Follow the instructions for your operating system:", "subchoice.choice_information_to_include_f_09B54": "Windows: How to create or generate a WSDIAG diagnostics file on a Windows computer?", "subchoice.choice_information_to_include_f_0C694": "macOS: How do I generate WSDiag diagnostic logs on WithSecure Mac products?", "subchoice.choice_information_to_include_f_0312B": "Linux: How do I create an FSDIAG file on Linux systems?", "step.step_information_to_include_f_01C83": "Generate WSDIAG (Diagnostic) Logs", "subsubstep.step_information_to_include_f_0A750": "Download: Autoruns", "subsubstep.step_information_to_include_f_0B34C": "Run the tool and enable Hide Signed Microsoft Entries", "subsubstep.step_information_to_include_f_0004F": "Save the results as autoruns.arn on your Desktop.", "content.p_information_to_include_f_09651": "", "substep.substep_information_to_include_f_084EE": "Autoruns Log:", "subsubstep.step_information_to_include_f_02E15": "Download Process Explorer", "subsubstep.step_information_to_include_f_0EA92": "Extract the ZIP and run procexp.exe as Administrator.", "subsubstep.step_information_to_include_f_02E56": "Go to File > Save and save the file as procexp.txt on your Desktop.", "content.p_information_to_include_f_07A79": "", "substep.substep_information_to_include_f_001B3": "Process Explorer Log", "step.step_information_to_include_f_0EBB0": "Create additional Diagnostic Files", "substep.substep_information_to_include_f_0C2F6": "Rename your diagnostic ZIP file (e.g. wsdiag_customername.zip) for easier identification.", "substep.substep_information_to_include_f_0775C": "Place the sample file in a password-protected ZIP (infected).", "substep.substep_information_to_include_f_0BEA8": "Upload all required files (WSDIAG, sample, autoruns.arn, procexp.txt) to Dropzone and include the link in your request.", "step.step_information_to_include_f_0D74C": "Upload All Files via Dropzone", "content.p_information_to_include_f_05FC7": "What happens next:", "step.step_information_to_include_f_0544A": "The WithSecure team will analyze the sample and determine, if it represents a new or undetected threat.", "step.step_information_to_include_f_043B4": "If detection is missing, a new detection signature or rule will be created and published via Security Cloud updates.", "step.step_information_to_include_f_04563": "You'll receive feedback and results directly within your Elements Request.", "content.note_information_to_include_f_0CB75": "Important: ", "content.note_information_to_include_f_07867": "Note: ", "content.note_information_to_include_f_0DCCF": "Warning: Never send live malware unprotected. Always use ZIP + password infected", "desc": [ "content.p_information_to_include_f_032C2", { "steps.steps_information_to_include_f_04C36": [ "step.step_information_to_include_f_0D83A", "content.p_information_to_include_f_01F98", { "dl.dl_information_to_include_f_0E802": [ { "dlentry.dlentry_information_to_include_f_0ED92": [ "content.dt_information_to_include_f_0A9D3", "content.dd_information_to_include_f_0D6DC" ] }, { "dlentry.dlentry_information_to_include_f_070F0": [ "content.dt_information_to_include_f_0AD8B", "content.dd_information_to_include_f_04C30" ] }, { "dlentry.dlentry_information_to_include_f_0C5DD": [ "content.dt_information_to_include_f_02983", "content.dd_information_to_include_f_0A71F" ] } ] }, "content.p_information_to_include_f_0223A", "step.step_information_to_include_f_0C098", "content.p_information_to_include_f_009C3", { "substeps.substepsalpha_informationalpha_toalpha_includealpha_falpha_0B8DC": [ "substep.substep_information_to_include_f_0629C", "substep.substep_information_to_include_f_03659", "substep.substep_information_to_include_f_01276", "substep.substep_information_to_include_f_0E49B" ] }, "step.step_information_to_include_f_01C83", "content.p_information_to_include_f_0A666", { "subchoices.choices_information_to_include_f_0C154": [ "subchoice.choice_information_to_include_f_09B54", "subchoice.choice_information_to_include_f_0C694", "subchoice.choice_information_to_include_f_0312B" ] }, "step.step_information_to_include_f_0EBB0", { "substeps.substepsalpha_informationalpha_toalpha_includealpha_falpha_0F015": [ "substep.substep_information_to_include_f_084EE", "content.p_information_to_include_f_09651", { "subsubsteps.ol_information_to_include_f_02677": [ "subsubstep.step_information_to_include_f_0A750", "subsubstep.step_information_to_include_f_0B34C", "subsubstep.step_information_to_include_f_0004F" ] }, "substep.substep_information_to_include_f_001B3", "content.p_information_to_include_f_07A79", { "subsubsteps.ol_information_to_include_f_0470F": [ "subsubstep.step_information_to_include_f_02E15", "subsubstep.step_information_to_include_f_0EA92", "subsubstep.step_information_to_include_f_02E56" ] } ] }, "step.step_information_to_include_f_0D74C", { "substeps.substepsalpha_informationalpha_toalpha_includealpha_falpha_0E6F2": [ "substep.substep_information_to_include_f_0C2F6", "substep.substep_information_to_include_f_0775C", "substep.substep_information_to_include_f_0BEA8" ] } ] }, "content.p_information_to_include_f_05FC7", { "steps.ul_information_to_include_f_0875F": [ "step.step_information_to_include_f_0544A", "step.step_information_to_include_f_043B4", "step.step_information_to_include_f_04563" ] }, "content.note_information_to_include_f_0CB75", "content.note_information_to_include_f_07867", "content.note_information_to_include_f_0DCCF" ] }, "about_ai_security-latest-en.json": { "title": "title_about_ai_security_000001_141C0", "title_about_ai_security_000001_141C0": "AI Security", "shortdesc": "shortdesc_about_ai_security_000002_973F7", "shortdesc_about_ai_security_000002_973F7": "WithSecure Elements AI Security finds the AI assets and AI identities in the managed organization, and lets you track which AI assets are approved.", "content.p_about_ai_security_000013_5406F": "Users can introduce AI tools without security administrators' knowledge. This is known as shadow AI. Shadow AI creates a blind spot because security administrators cannot protect access or data that they do not know exists. AI agents also use non-human identities, such as service accounts, to access systems. These are called agentic identities. AI Security helps you discover this software and these identities in the managed organization.", "content.p_about_ai_security_000014_871B1": "AI Security information is on the following pages in Elements Security Center:", "step.step_about_ai_security_000017_4F8F4": "The Software page lists the AI assets installed on the managed organization's devices, with the review status of each one.", "step.step_about_ai_security_000019_EA985": "The Service principals tab of the Identities page lists the AI identities in the managed organization's Microsoft tenant.", "step.step_about_ai_security_00001C_7B017": "The AI Security page shows a summary of the AI assets and AI identities.", "content.note_about_ai_security_00001E_48A93": "Important: AI Security is available as an Early Access feature for eligible WithSecure Elements subscribers for a limited time, until further notice. It is enabled automatically; no installation is required.", "content.title_about_ai_security_000020_5E9B2": "Eligible subscriptions", "content.p_about_ai_security_000021_A7934": "AI Security is available with the following subscriptions:", "content.dt_about_ai_security_000024_A136A": "Shadow AI discovery", "content.dd_about_ai_security_000025_356F3": "Elements Protect and Proactive bundles, Elements EDR, or Elements Exposure Management (XM) for Business, Users, and Devices.", "content.dt_about_ai_security_00002B_05276": "Agentic identity visibility", "content.dd_about_ai_security_00002C_9CEE7": "Elements Protect and Proactive bundles, Elements XM for Business, Users, and Identities, or Elements Identity Security (XDR).", "content.note_about_ai_security_000031_CD271": "Note: If none of these subscriptions apply, you can start a free 30-day trial from the Free trials button in Elements Security Center.", "desc": [ "content.p_about_ai_security_000013_5406F", "content.p_about_ai_security_000014_871B1", { "steps.ul_about_ai_security_000016_3B575": [ "step.step_about_ai_security_000017_4F8F4", "step.step_about_ai_security_000019_EA985", "step.step_about_ai_security_00001C_7B017" ] }, "content.note_about_ai_security_00001E_48A93", "content.title_about_ai_security_000020_5E9B2", "content.p_about_ai_security_000021_A7934", { "dl.dl_about_ai_security_000022_B1AE6": [ { "dlentry.dlentry_about_ai_security_000023_3755E": [ "content.dt_about_ai_security_000024_A136A", "content.dd_about_ai_security_000025_356F3" ] }, { "dlentry.dlentry_about_ai_security_00002A_2328F": [ "content.dt_about_ai_security_00002B_05276", "content.dd_about_ai_security_00002C_9CEE7" ] } ] }, "content.note_about_ai_security_000031_CD271" ] }, "about_ai_asset_visibility-latest-en.json": { "title": "title_about_ai_asset_visibilit_0108D", "title_about_ai_asset_visibilit_0108D": "Reviewing AI assets on devices", "shortdesc": "shortdesc_about_ai_asset_visibilit_00774", "shortdesc_about_ai_asset_visibilit_00774": "You can filter the Software page to list the AI assets installed on the managed organization's devices, and mark each one as approved or disallowed.", "content.p_about_ai_asset_visibilit_0DB12": "By default, the Software page lists all software installed across the managed organization. The Show AI assets button applies the Category filter, which narrows the list to AI assets only.", "content.p_about_ai_asset_visibilit_08B35": "Each AI asset is placed in one of the following categories:", "content.dt_about_ai_asset_visibilit_002EB": "AI Chat Assistant", "content.dd_about_ai_asset_visibilit_0E038": "A general-purpose conversational AI tool, such as ChatGPT or Claude.", "content.dt_about_ai_asset_visibilit_08A06": "AI Coding Assistant", "content.dd_about_ai_asset_visibilit_096C5": "An AI tool built specifically to help write, review, or debug code, such as Claude Code.", "content.dt_about_ai_asset_visibilit_0A6DB": "Generative AI Tool", "content.dd_about_ai_asset_visibilit_02C8A": "A tool that generates text, images, or other content from a prompt, without a dedicated chat or coding interface.", "content.dt_about_ai_asset_visibilit_08A53": "AI Agent", "content.dd_about_ai_asset_visibilit_0B3D0": "Software that carries out tasks on the user's behalf within a defined scope, such as an AI feature embedded in productivity software.", "content.dt_about_ai_asset_visibilit_06692": "AI Autonomous Agent", "content.dd_about_ai_asset_visibilit_00EE9": "An AI agent that plans and takes multiple actions toward a goal, with limited human confirmation at each step.", "content.dt_about_ai_asset_visibilit_0AEB8": "Unspecified AI Application", "content.dd_about_ai_asset_visibilit_02A29": "An application confirmed to use AI capabilities, but not yet classified into one of the other categories.", "content.p_about_ai_asset_visibilit_059A0": "Each AI asset also has a review status, which records your decision about it:", "content.dt_about_ai_asset_visibilit_0FAC8": "Not reviewed", "content.dd_about_ai_asset_visibilit_0F0D3": "The default status for a newly discovered AI asset.", "content.dt_about_ai_asset_visibilit_0B747": "Approved", "content.dd_about_ai_asset_visibilit_01FE5": "You have reviewed the AI asset and accept its use in the managed organization.", "content.dt_about_ai_asset_visibilit_0819B": "Disallowed", "content.dd_about_ai_asset_visibilit_072FD": "You have reviewed the AI asset and do not accept its use in the managed organization. The AI Security dashboard counts the disallowed AI assets and the devices that run them.", "content.p_about_ai_asset_visibilit_061C9": "The review status is for reporting only. Disallowing an AI asset does not block it or stop it from running on devices. The review status is set separately for each organization, so the same software can be approved in one organization and disallowed in another.", "content.note_about_ai_asset_visibilit_093CC": "Note: AI assets are different from the Artificial Intelligence category in Web content control (under Profile Manager), which blocks access to AI-related websites. AI asset visibility covers installed AI assets.", "desc": [ "content.p_about_ai_asset_visibilit_0DB12", "content.p_about_ai_asset_visibilit_08B35", { "dl.dl_about_ai_asset_visibilit_0960A": [ { "dlentry.dlentry_about_ai_asset_visibilit_084A1": [ "content.dt_about_ai_asset_visibilit_002EB", "content.dd_about_ai_asset_visibilit_0E038" ] }, { "dlentry.dlentry_about_ai_asset_visibilit_02784": [ "content.dt_about_ai_asset_visibilit_08A06", "content.dd_about_ai_asset_visibilit_096C5" ] }, { "dlentry.dlentry_about_ai_asset_visibilit_0BC24": [ "content.dt_about_ai_asset_visibilit_0A6DB", "content.dd_about_ai_asset_visibilit_02C8A" ] }, { "dlentry.dlentry_about_ai_asset_visibilit_0D92E": [ "content.dt_about_ai_asset_visibilit_08A53", "content.dd_about_ai_asset_visibilit_0B3D0" ] }, { "dlentry.dlentry_about_ai_asset_visibilit_0DE57": [ "content.dt_about_ai_asset_visibilit_06692", "content.dd_about_ai_asset_visibilit_00EE9" ] }, { "dlentry.dlentry_about_ai_asset_visibilit_05C8F": [ "content.dt_about_ai_asset_visibilit_0AEB8", "content.dd_about_ai_asset_visibilit_02A29" ] } ] }, "content.p_about_ai_asset_visibilit_059A0", { "dl.dl_about_ai_asset_visibilit_056EE": [ { "dlentry.dlentry_about_ai_asset_visibilit_02868": [ "content.dt_about_ai_asset_visibilit_0FAC8", "content.dd_about_ai_asset_visibilit_0F0D3" ] }, { "dlentry.dlentry_about_ai_asset_visibilit_015AD": [ "content.dt_about_ai_asset_visibilit_0B747", "content.dd_about_ai_asset_visibilit_01FE5" ] }, { "dlentry.dlentry_about_ai_asset_visibilit_06C51": [ "content.dt_about_ai_asset_visibilit_0819B", "content.dd_about_ai_asset_visibilit_072FD" ] } ] }, "content.p_about_ai_asset_visibilit_061C9", "content.note_about_ai_asset_visibilit_093CC" ] }, "viewing_ai_assets-latest-en.json": { "title": "title_viewing_ai_assets_000001_E4E09", "title_viewing_ai_assets_000001_E4E09": "View the AI assets installed on devices", "shortdesc": "shortdesc_viewing_ai_assets_000002_DB24A", "shortdesc_viewing_ai_assets_000002_DB24A": "You can view and filter the AI assets installed on the managed organization's devices.", "content.p_viewing_ai_assets_000011_78FC6": "By default, the Software page lists all software installed across the managed organization.", "content.p_viewing_ai_assets_000013_F2FBF": "To view the AI assets in the managed organization:", "content.p_viewing_ai_assets_000019_74D28": "The Software page opens.", "step.step_viewing_ai_assets_000015_29A4F": "Under Environment, select Software on the sidebar.", "step.step_viewing_ai_assets_00001B_6FC23": "Select the Device software tab.", "content.p_viewing_ai_assets_000021_98863": "The table is filtered to AI assets only, using the Category filter.", "step.step_viewing_ai_assets_00001E_29CE3": "Select Show AI assets.", "step.step_viewing_ai_assets_000023_4A60A": "To narrow the list further, select specific categories in the Category filter.", "content.p_viewing_ai_assets_000029_74B77": "A details page opens, showing the devices where the software is present and their software versions.", "step.step_viewing_ai_assets_000026_D075E": "To view the devices where a specific AI asset is used, select its name in the Software Name column.", "content.p_viewing_ai_assets_00002B_B41BE": "The table lists each AI asset with its version, vendor, platform, known CVEs, review status, and the number of devices where it is present.", "desc": [ "content.p_viewing_ai_assets_000011_78FC6", "content.p_viewing_ai_assets_000013_F2FBF", { "steps.steps_viewing_ai_assets_000014_38DFD": [ "step.step_viewing_ai_assets_000015_29A4F", "content.p_viewing_ai_assets_000019_74D28", "step.step_viewing_ai_assets_00001B_6FC23", "step.step_viewing_ai_assets_00001E_29CE3", "content.p_viewing_ai_assets_000021_98863", "step.step_viewing_ai_assets_000023_4A60A", "step.step_viewing_ai_assets_000026_D075E", "content.p_viewing_ai_assets_000029_74B77" ] }, "content.p_viewing_ai_assets_00002B_B41BE" ] }, "setting_ai_asset_status-latest-en.json": { "title": "title_setting_ai_asset_status_001200", "title_setting_ai_asset_status_001200": "Approve or disallow an AI asset", "shortdesc": "shortdesc_setting_ai_asset_status_00E878", "shortdesc_setting_ai_asset_status_00E878": "You can approve or disallow the AI assets installed on the managed organization's devices.", "content.p_setting_ai_asset_status_00787E": "You have opened the Software page and selected Show AI assets.", "content.note_setting_ai_asset_status_006267": "Important: The review status is for reporting only. Disallowing an AI asset does not block it or stop it from running on devices.", "content.p_setting_ai_asset_status_009AAD": "The review status helps you track AI use. For example, you can use it to filter the Software page, and the AI Security dashboard uses it to show which devices run disallowed AI assets.", "content.p_setting_ai_asset_status_00520A": "To approve or disallow an AI asset:", "content.p_setting_ai_asset_status_002098": "A bar showing the number of selected AI assets appears at the bottom of the page.", "step.step_setting_ai_asset_status_00B025": "On the Software page, select the checkbox of the AI asset (or assets) whose status you want to change.", "subchoice.choice_setting_ai_asset_status_003EB4": "Select Set to approved… to mark the AI asset as approved.", "subchoice.choice_setting_ai_asset_status_00E4DB": "Select Set to disallowed… to mark the AI asset as disallowed.", "subchoice.choice_setting_ai_asset_status_009F52": "Select Clear status… to return the AI asset to Not reviewed.", "content.p_setting_ai_asset_status_009719": "The status of the selected AI assets changes immediately.", "step.step_setting_ai_asset_status_002BFA": "Select one of the following actions.", "content.p_setting_ai_asset_status_007B86": "The Status column shows the new status for the selected AI assets.", "desc": [ "content.p_setting_ai_asset_status_00787E", "content.note_setting_ai_asset_status_006267", "content.p_setting_ai_asset_status_009AAD", "content.p_setting_ai_asset_status_00520A", { "steps.steps_setting_ai_asset_status_00E267": [ "step.step_setting_ai_asset_status_00B025", "content.p_setting_ai_asset_status_002098", "step.step_setting_ai_asset_status_002BFA", { "subchoices.choices_setting_ai_asset_status_005B1A": [ "subchoice.choice_setting_ai_asset_status_003EB4", "subchoice.choice_setting_ai_asset_status_00E4DB", "subchoice.choice_setting_ai_asset_status_009F52" ] }, "content.p_setting_ai_asset_status_009719" ] }, "content.p_setting_ai_asset_status_007B86" ] }, "about_ai_identities-latest-en.json": { "title": "title_about_ai_identities_000001D72B", "title_about_ai_identities_000001D72B": "Managing AI identities", "shortdesc": "shortdesc_about_ai_identities_0000022EBA", "shortdesc_about_ai_identities_0000022EBA": "WithSecure Elements identifies the identities that AI agents, assistants, and other AI tools use to access the managed organization's systems.", "content.p_about_ai_identities_000014CB73": "AI tools, agents, and integrations often create their own identities, such as service accounts, when they connect to your systems. These are called agentic identities.", "content.p_about_ai_identities_000015CE4C": "WithSecure Elements identifies agentic identities through Microsoft Entra ID service principals. A service principal is the identity that an application uses to access resources in a Microsoft Entra ID tenant. WithSecure Elements reads the service principals from the Microsoft tenant that you connect as a cloud account.", "content.p_about_ai_identities_00001A1912": "On the Service principals tab, the AI Assets filter classifies each service principal as one of the following:", "content.dt_about_ai_identities_00001FA687": "AI Agent", "content.dd_about_ai_identities_000021E1B3": "Confirmed as an AI agent. An AI Agent label appears next to the name.", "content.dt_about_ai_identities_000024EA06": "Possible AI Agent", "content.dd_about_ai_identities_0000265472": "Might be an AI agent. Microsoft Entra ID shows indirect signs of a link to an Azure AI service, but nothing proves that it is an AI agent.", "content.dt_about_ai_identities_0000299415": "Not an AI Agent", "content.dd_about_ai_identities_00002B06F1": "Not identified as an AI agent.", "content.p_about_ai_identities_00002C45AF": "Show AI Assets is a predefined filter. It lists the service principals classified as AI Agent or Possible AI Agent, and hides those classified as Not an AI Agent.", "content.p_about_ai_identities_0000314DF3": "The Type column shows whether a service principal is a Service Identity or a Managed Identity. Both types are Microsoft Entra ID application service principals. The Importance column shows its asset importance (Minor, Normal, or Critical), which is used in risk evaluations.", "content.p_about_ai_identities_00003A0851": "The AI Security dashboard shows a summary of the AI identities.", "desc": [ "content.p_about_ai_identities_000014CB73", "content.p_about_ai_identities_000015CE4C", "content.p_about_ai_identities_00001A1912", { "dl.dl_about_ai_identities_00001D31D0": [ { "dlentry.dlentry_about_ai_identities_00001E2CC9": [ "content.dt_about_ai_identities_00001FA687", "content.dd_about_ai_identities_000021E1B3" ] }, { "dlentry.dlentry_about_ai_identities_00002325FE": [ "content.dt_about_ai_identities_000024EA06", "content.dd_about_ai_identities_0000265472" ] }, { "dlentry.dlentry_about_ai_identities_0000288DFB": [ "content.dt_about_ai_identities_0000299415", "content.dd_about_ai_identities_00002B06F1" ] } ] }, "content.p_about_ai_identities_00002C45AF", "content.p_about_ai_identities_0000314DF3", "content.p_about_ai_identities_00003A0851" ] }, "viewing_ai_identities-latest-en.json": { "title": "title_viewing_ai_identities_0000485F", "title_viewing_ai_identities_0000485F": "View AI identities", "shortdesc": "shortdesc_viewing_ai_identities_000067D5", "shortdesc_viewing_ai_identities_000067D5": "List the service principals that belong to AI agents and check their credentials, to see which AI tools can access the Microsoft tenant.", "content.p_viewing_ai_identities_0000BD4E": "The managed organization's Microsoft tenant is added as a cloud account under Microsoft Tenants on the Cloud page, and Identity Inventory is connected. Identities appear after the connection is established and the data scans complete without errors.", "content.p_viewing_ai_identities_00001413": "To view the AI identities in the managed organization:", "content.p_viewing_ai_identities_0000B9CC": "The Identities page opens.", "step.step_viewing_ai_identities_0000E0A6": "Under Environment, select Identities on the sidebar.", "content.note_viewing_ai_identities_0000CA3D": "Note: The Account status filter is set to Enabled by default. To include disabled service principals, remove this filter.", "content.p_viewing_ai_identities_00005800": "The tab lists the enabled service principals in the managed organization.", "step.step_viewing_ai_identities_000049A3": "Select the Service principals tab.", "content.p_viewing_ai_identities_00004D75": "The AI Assets filter is set to AI Agent and Possible AI Agent. An AI Agent label appears next to the name of each AI agent.", "step.step_viewing_ai_identities_00005D98": "Select Show AI Assets.", "content.p_viewing_ai_identities_000062AC": "This removes all filters, including the Account status filter.", "substep.substep_viewing_ai_identities_0000876B": "Select Clear all filters.", "substep.substep_viewing_ai_identities_0000D5D5": "In the filter fields, select AI Assets and Equals.", "substep.substep_viewing_ai_identities_000070D0": "Select the classifications that you want to show, for example Not an AI Agent.", "content.p_viewing_ai_identities_0000C0E2": "The table shows only the service principals with the selected classifications.", "substep.substep_viewing_ai_identities_0000BBC2": "Select Add.", "step.step_viewing_ai_identities_0000887E": "To show a different classification, create your own AI Assets filter.", "step.step_viewing_ai_identities_0000A1C9": "To find a specific AI identity, enter its name in the Search for service principal field.", "content.p_viewing_ai_identities_000041AB": "The details panel of the AI identity opens.", "step.step_viewing_ai_identities_00002C7F": "Select the name of the AI identity in the Service principal column.", "step.step_viewing_ai_identities_0000715D": "Under Credentials, check the type, display name, and expiration date of each credential that the AI identity uses.", "step.step_viewing_ai_identities_00001933": "Check the Preferred SSO mode and Pre-auth manual action values.", "step.step_viewing_ai_identities_0000F059": "Select Close.", "content.p_viewing_ai_identities_00001403": "The Service principals tab lists the AI identities in the managed organization, with the type, importance, business context, and creation date of each one.", "desc": [ "content.p_viewing_ai_identities_0000BD4E", "content.p_viewing_ai_identities_00001413", { "steps.steps_viewing_ai_identities_00003375": [ "step.step_viewing_ai_identities_0000E0A6", "content.p_viewing_ai_identities_0000B9CC", "step.step_viewing_ai_identities_000049A3", "content.note_viewing_ai_identities_0000CA3D", "content.p_viewing_ai_identities_00005800", "step.step_viewing_ai_identities_00005D98", "content.p_viewing_ai_identities_00004D75", "step.step_viewing_ai_identities_0000887E", { "substeps.substepsalpha_viewingalpha_aialpha_identitiesalpha_00002FFC": [ "substep.substep_viewing_ai_identities_0000876B", "content.p_viewing_ai_identities_000062AC", "substep.substep_viewing_ai_identities_0000D5D5", "substep.substep_viewing_ai_identities_000070D0", "substep.substep_viewing_ai_identities_0000BBC2", "content.p_viewing_ai_identities_0000C0E2" ] }, "step.step_viewing_ai_identities_0000A1C9", "step.step_viewing_ai_identities_00002C7F", "content.p_viewing_ai_identities_000041AB", "step.step_viewing_ai_identities_0000715D", "step.step_viewing_ai_identities_00001933", "step.step_viewing_ai_identities_0000F059" ] }, "content.p_viewing_ai_identities_00001403" ] }, "updating_ai_identities-latest-en.json": { "title": "title_updating_ai_identities_000E345", "title_updating_ai_identities_000E345": "Set risk and response options for AI identities", "shortdesc": "shortdesc_updating_ai_identities_0002829", "shortdesc_updating_ai_identities_0002829": "Use importance and business context to weight AI identities in risk evaluations, and choose whether WithSecure Threat Analysts can take response actions on them without your approval.", "content.p_updating_ai_identities_0001409": "You have opened the Service principals tab of the Identities page and selected Show AI Assets.", "content.p_updating_ai_identities_0001796": "You can update the importance and business context, the pre-authorized actions, or both. To update AI identities:", "content.p_updating_ai_identities_0008C7B": "A bar showing the number of selected service principals appears at the bottom of the page.", "step.step_updating_ai_identities_00015A4": "Select the checkbox of each AI identity that you want to update.", "content.p_updating_ai_identities_000E319": "The importance is used in risk evaluations.", "substep.substep_updating_ai_identities_00014BA": "Under Asset importance, select Minor, Normal, or Critical.", "substep.substep_updating_ai_identities_0003009": "In the business context field, enter the business context of the AI identities as free text.", "substep.substep_updating_ai_identities_000B0FC": "Select Update.", "step.step_updating_ai_identities_000D058": "To change the importance and business context, select Update importance and business context.", "content.p_updating_ai_identities_0007E31": "The organization default for service principals is None.", "substep.substep_updating_ai_identities_0004473": "Under Manual actions, select Organization default or Override.", "content.p_updating_ai_identities_0005FF3": "With All actions, WithSecure Threat Analysts can perform any manual response action without requesting your authorization first. With None, they request your approval for any action other than investigation and guidance.", "substep.substep_updating_ai_identities_000E419": "If you selected Override, select All actions or None.", "substep.substep_updating_ai_identities_0007EF5": "Select Update.", "step.step_updating_ai_identities_000B75B": "To change the pre-authorized actions, select Update pre-authorized actions.", "content.p_updating_ai_identities_0007C5F": "The changes apply to all the selected AI identities. The Importance and Business context columns show the new values. The details panel of each updated AI identity shows the new Pre-auth manual action value.", "content.p_updating_ai_identities_0002D7F": "For more information on pre-authorization, see Pre-authorization in the Elements Managed Detection and Response documentation.", "desc": [ "content.p_updating_ai_identities_0001409", "content.p_updating_ai_identities_0001796", { "steps.steps_updating_ai_identities_0007F7A": [ "step.step_updating_ai_identities_00015A4", "content.p_updating_ai_identities_0008C7B", "step.step_updating_ai_identities_000D058", { "substeps.substepsalpha_updatingalpha_aialpha_identitiesalpha_000A9F1": [ "substep.substep_updating_ai_identities_00014BA", "content.p_updating_ai_identities_000E319", "substep.substep_updating_ai_identities_0003009", "substep.substep_updating_ai_identities_000B0FC" ] }, "step.step_updating_ai_identities_000B75B", { "substeps.substepsalpha_updatingalpha_aialpha_identitiesalpha_0002F3A": [ "substep.substep_updating_ai_identities_0004473", "content.p_updating_ai_identities_0007E31", "substep.substep_updating_ai_identities_000E419", "content.p_updating_ai_identities_0005FF3", "substep.substep_updating_ai_identities_0007EF5" ] } ] }, "content.p_updating_ai_identities_0007C5F", "content.p_updating_ai_identities_0002D7F" ] }, "about_ai_security_dashboard-latest-en.json": { "title": "title_about_ai_security_dashbo_00DE4", "title_about_ai_security_dashbo_00DE4": "Monitoring AI use with the AI Security dashboard", "shortdesc": "shortdesc_about_ai_security_dashbo_0C7AA", "shortdesc_about_ai_security_dashbo_0C7AA": "The AI Security dashboard summarizes the AI assets and AI agent identities in the managed organization, and shows which devices run disallowed AI assets.", "content.p_about_ai_security_dashbo_0FE93": "The dashboard has the following sections:", "content.dt_about_ai_security_dashbo_01AD7": "Summary", "content.dd_about_ai_security_dashbo_0CF7B": "States how many AI assets are disallowed in the managed organization, and how many devices run them, out of all devices with AI assets.", "content.dt_about_ai_security_dashbo_03388": "Different AI assets detected", "content.dd_about_ai_security_dashbo_0F6DE": "The number of different AI assets detected, and the number of devices they are on.", "content.dt_about_ai_security_dashbo_0D35C": "Disallowed", "content.dd_about_ai_security_dashbo_050D3": "The number of AI assets with the Disallowed review status.", "content.dt_about_ai_security_dashbo_0DD98": "Devices running disallowed AI", "content.dd_about_ai_security_dashbo_0C9EB": "The number of devices that run at least one disallowed AI asset.", "content.dt_about_ai_security_dashbo_098AD": "Devices with the most disallowed AI items", "content.dd_about_ai_security_dashbo_06591": "Lists the devices with the highest number of disallowed AI assets, sorted by disallowed asset count. Devices with no disallowed assets are not shown.", "content.dt_about_ai_security_dashbo_03570": "Most common AI software", "content.dd_about_ai_security_dashbo_08CF0": "", "content.dd_p_about_ai_security_dashbo_04CFC": "Lists AI assets ranked by device count, together with their delivery type, review status, and the number of devices where they are present.
", "content.dd_p_about_ai_security_dashbo_0FDE3": "Delivery type is one of the following:
", "choice.choice_about_ai_security_dashbo_071CD": "AI-native software – a standalone AI application.", "choice.choice_about_ai_security_dashbo_048DC": "Embedded AI – AI functionality embedded in other software.", "content.p_about_ai_security_dashbo_0D29F": "", "content.dt_about_ai_security_dashbo_044AD": "AI agent identities in your environment", "content.dd_about_ai_security_dashbo_0A97E": "", "content.dd_p_about_ai_security_dashbo_0C0A4": "Lists the AI agent identities registered in Microsoft Entra ID, with the following columns:
", "choice.choice_about_ai_security_dashbo_08B16": "Agent – the name and ID of the identity.", "choice.choice_about_ai_security_dashbo_04296": "Permission scope – the permissions granted to the identity.", "choice.choice_about_ai_security_dashbo_04007": "Created – the creation date of the identity.", "choice.choice_about_ai_security_dashbo_0BFEA": "Status – the status of the identity, such as Active.", "content.dt_about_ai_security_dashbo_0CBB7": "AI assets by type", "content.dd_about_ai_security_dashbo_08D49": "Shows the number of AI assets by delivery type and by category. The delivery type is how the AI asset reaches the device. The category is the kind of AI asset, such as AI chat assistant, AI agent, AI coding assistant, or Other AI software.", "content.dt_about_ai_security_dashbo_0F66D": "Customers by share of approved AI software", "content.dd_about_ai_security_dashbo_06374": "Shows how many of the managed organization's AI assets have each review status: Approved, Disallowed, or Not reviewed.", "desc": [ "content.p_about_ai_security_dashbo_0FE93", { "dl.dl_about_ai_security_dashbo_02455": [ { "dlentry.dlentry_about_ai_security_dashbo_0D8B6": [ "content.dt_about_ai_security_dashbo_01AD7", "content.dd_about_ai_security_dashbo_0CF7B" ] }, { "dlentry.dlentry_about_ai_security_dashbo_017F5": [ "content.dt_about_ai_security_dashbo_03388", "content.dd_about_ai_security_dashbo_0F6DE" ] }, { "dlentry.dlentry_about_ai_security_dashbo_0F072": [ "content.dt_about_ai_security_dashbo_0D35C", "content.dd_about_ai_security_dashbo_050D3" ] }, { "dlentry.dlentry_about_ai_security_dashbo_03F2C": [ "content.dt_about_ai_security_dashbo_0DD98", "content.dd_about_ai_security_dashbo_0C9EB" ] }, { "dlentry.dlentry_about_ai_security_dashbo_08C8D": [ "content.dt_about_ai_security_dashbo_098AD", "content.dd_about_ai_security_dashbo_06591" ] }, { "dlentry.dlentry_about_ai_security_dashbo_01990": [ "content.dt_about_ai_security_dashbo_03570", "content.dd_about_ai_security_dashbo_08CF0", "content.dd_p_about_ai_security_dashbo_04CFC", "content.dd_p_about_ai_security_dashbo_0FDE3", { "choices.ul_about_ai_security_dashbo_02649": [ "choice.choice_about_ai_security_dashbo_071CD", "choice.choice_about_ai_security_dashbo_048DC" ] }, "content.p_about_ai_security_dashbo_0D29F" ] }, { "dlentry.dlentry_about_ai_security_dashbo_0A5A1": [ "content.dt_about_ai_security_dashbo_044AD", "content.dd_about_ai_security_dashbo_0A97E", "content.dd_p_about_ai_security_dashbo_0C0A4", { "choices.ul_about_ai_security_dashbo_00708": [ "choice.choice_about_ai_security_dashbo_08B16", "choice.choice_about_ai_security_dashbo_04296", "choice.choice_about_ai_security_dashbo_04007", "choice.choice_about_ai_security_dashbo_0BFEA" ] } ] }, { "dlentry.dlentry_about_ai_security_dashbo_0B025": [ "content.dt_about_ai_security_dashbo_0CBB7", "content.dd_about_ai_security_dashbo_08D49" ] }, { "dlentry.dlentry_about_ai_security_dashbo_0767C": [ "content.dt_about_ai_security_dashbo_0F66D", "content.dd_about_ai_security_dashbo_06374" ] } ] } ] }, "viewing_ai_security_dashboard-latest-en.json": { "title": "title_viewing_ai_security_dash_02497", "title_viewing_ai_security_dash_02497": "View the AI Security dashboard", "shortdesc": "shortdesc_viewing_ai_security_dash_05D38", "shortdesc_viewing_ai_security_dash_05D38": "You can view a summary of the AI assets and AI agent identities detected in the managed organization on the AI Security page.", "content.p_viewing_ai_security_dash_0DB44": "To view the AI Security dashboard:", "content.p_viewing_ai_security_dash_04B2F": "The AI Security page opens.", "step.step_viewing_ai_security_dash_09E37": "Under Environment, select AI Security on the sidebar.", "content.p_viewing_ai_security_dash_00152": "The AI Security page shows the summary of disallowed AI assets, followed by the dashboard sections for AI assets and AI agent identities.", "content.note_viewing_ai_security_dash_07C64": "Note: Alternatively, go to My report under Reports, open View template, and select AI Dashboard to view the summary as a report.", "desc": [ "content.p_viewing_ai_security_dash_0DB44", { "steps.steps_viewing_ai_security_dash_09592": [ "step.step_viewing_ai_security_dash_09E37", "content.p_viewing_ai_security_dash_04B2F" ] }, "content.p_viewing_ai_security_dash_00152", "content.note_viewing_ai_security_dash_07C64" ] }, "elevate_requests-latest-en.json": { "title": "title_elevate_requests_000001_3457DB", "title_elevate_requests_000001_3457DB": "Elevate Requests", "shortdesc": "shortdesc_elevate_requests_000002_CCFDB0", "shortdesc_elevate_requests_000002_CCFDB0": "With Elevate Requests, WithSecure? Elements Infinite customers can raise security concerns directly to WithSecure experts for investigation and track each request in the Elements Security Center.", "content.p_elevate_requests_000013_06FAD3": "WithSecure? Elements Infinite includes Elevate Requests, a service that lets you raise a security concern or a question about your service directly to WithSecure experts. WithSecure security experts, including the Detection and Response Team (DRT), investigate each request and keep you updated in the Elements Security Center.", "content.p_elevate_requests_000018_FC9A90": "Use Elevate Requests for security concerns and service questions, including issues that have not triggered a detection. Elevate Requests are not a channel for technical support with installing or troubleshooting WithSecure products.", "content.p_elevate_requests_00001A_AE63A1": "When you create a request, you select a request type and describe your concern. After you submit the request, you can track its status and exchange comments with WithSecure in the Requests view of the Elements Security Center.", "desc": [ "content.p_elevate_requests_000013_06FAD3", "content.p_elevate_requests_000018_FC9A90", "content.p_elevate_requests_00001A_AE63A1" ] }, "creating_a_request-latest-en.json": { "title": "title_creating_a_request_000001_8FC5", "title_creating_a_request_000001_8FC5": "Create a request", "shortdesc": "shortdesc_creating_a_request_000002_5104", "shortdesc_creating_a_request_000002_5104": "Create a request in the Elements Security Center to ask WithSecure experts to investigate a security concern.", "content.p_creating_a_request_000013_809C": "The Requests feature is available only for the Company scope. Before you start, select the correct company scope in the top bar.", "step.step_creating_a_request_000016_D9D1": "Go to Requests on the left-side menu.", "content.p_creating_a_request_00001C_A089": "A flyout panel opens.", "step.step_creating_a_request_000019_C1F6": "Select Create Request at the top of the main page.", "step.step_creating_a_request_00001D_529E": "Select the Request Type from the drop-down list.", "subchoice.choice_creating_a_request_000024_BF1D": "Organization ID", "subchoice.choice_creating_a_request_000026_150E": "Device UUID/name", "subchoice.choice_creating_a_request_000028_3CA8": "Title", "subchoice.choice_creating_a_request_00002A_BD48": "Description/Summary of concern", "content.p_creating_a_request_000022_AC91": "", "step.step_creating_a_request_000020_D1E1": "Enter the required details:", "step.step_creating_a_request_00002C_D0A6": "Select Create Request to submit the request.", "desc": [ "content.p_creating_a_request_000013_809C", { "steps.steps_creating_a_request_000015_0BD1": [ "step.step_creating_a_request_000016_D9D1", "step.step_creating_a_request_000019_C1F6", "content.p_creating_a_request_00001C_A089", "step.step_creating_a_request_00001D_529E", "step.step_creating_a_request_000020_D1E1", "content.p_creating_a_request_000022_AC91", { "subchoices.ul_creating_a_request_000023_0EB7": [ "subchoice.choice_creating_a_request_000024_BF1D", "subchoice.choice_creating_a_request_000026_150E", "subchoice.choice_creating_a_request_000028_3CA8", "subchoice.choice_creating_a_request_00002A_BD48" ] }, "step.step_creating_a_request_00002C_D0A6" ] } ] }, "viewing_and_managing_request_details-latest-en.json": { "title": "title_viewing_and_managing_req_0B60F", "title_viewing_and_managing_req_0B60F": "View and manage request details", "shortdesc": "shortdesc_viewing_and_managing_req_04A80", "shortdesc_viewing_and_managing_req_04A80": "Open a request in the Elements Security Center to check its status and exchange comments with WithSecure.", "subchoice.choice_viewing_and_managing_req_03C31": "Title", "subchoice.choice_viewing_and_managing_req_0B0E7": "Request Type", "subchoice.choice_viewing_and_managing_req_02152": "Created/Updated dates", "subchoice.choice_viewing_and_managing_req_0F5FF": "Status", "content.p_viewing_and_managing_req_09452": "The main page shows all requests for the managed organization in a table. Each row shows key details such as:", "step.step_viewing_and_managing_req_03AD4": "Go to Requests.", "step.step_viewing_and_managing_req_0B30E": "Use the filters to find a specific request.", "content.p_viewing_and_managing_req_0B73B": "The details page shows the Status, Request Type, created and updated timestamps, title, description, and other metadata.", "step.step_viewing_and_managing_req_03A7E": "Select the value in the Title field to open the details of a request.", "content.p_viewing_and_managing_req_0C583": "Comments from the WithSecure team appear on the right side with a WithSecure label.", "step.step_viewing_and_managing_req_00208": "Open the Comments tab on the details page to view the full comment thread for the request.", "step.step_viewing_and_managing_req_06C51": "To add a comment, type your message in the field at the bottom of the Comments tab and select Send Comment.", "desc": [ { "steps.steps_viewing_and_managing_req_04564": [ "step.step_viewing_and_managing_req_03AD4", "content.p_viewing_and_managing_req_09452", { "subchoices.ul_viewing_and_managing_req_0F1C4": [ "subchoice.choice_viewing_and_managing_req_03C31", "subchoice.choice_viewing_and_managing_req_0B0E7", "subchoice.choice_viewing_and_managing_req_02152", "subchoice.choice_viewing_and_managing_req_0F5FF" ] }, "step.step_viewing_and_managing_req_0B30E", "step.step_viewing_and_managing_req_03A7E", "content.p_viewing_and_managing_req_0B73B", "step.step_viewing_and_managing_req_00208", "content.p_viewing_and_managing_req_0C583", "step.step_viewing_and_managing_req_06C51" ] } ] }, "third_party_integration-latest-en.json": { "title": "title_third_party_integrations_0EF55", "title_third_party_integrations_0EF55": "Third-party integrations", "shortdesc": "shortdesc_third_party_integrations_060AE", "shortdesc_third_party_integrations_060AE": "WithSecure Elements integrates with Autotask, ConnectWise, and Halo professional services automation (PSA) platforms.", "content.p_third_party_integrations_0AE5B": "Each of these PSA systems includes its own ticketing functionality. The integration allows Elements to exchange ticket information with them.", "content.p_third_party_integrations_0A26C": "High-level company-mapping process works as follows:", "step.step_third_party_integrations_0869B": "Enabling the integration and opening the mapping view - After entering your PSA API credentials and activating the integration, go to Management > Integrations in Elements Security Center. On the enabled integrations card, select Company mappings.", "step.step_third_party_integrations_0C8EF": "Matching PSA companies to Elements organizations - A table shows all companies retrieved from your PSA system. For each PSA company, select the corresponding Elements organization from the dropdown list.", "step.step_third_party_integrations_0342C": "Saving the mapping to activate the ticket flow - When all required mappings are complete, select Save. This enables ticket synchronization for every mapped organization.", "desc": [ "content.p_third_party_integrations_0AE5B", "content.p_third_party_integrations_0A26C", { "steps.ol_third_party_integrations_0E8DD": [ "step.step_third_party_integrations_0869B", "step.step_third_party_integrations_0C8EF", "step.step_third_party_integrations_0342C" ] } ] }, "autotask_psa_integration-latest-en.json": { "title": "title_autotask_psa_integration_07374", "title_autotask_psa_integration_07374": "Integrating WithSecure Elements with Autotask PSA", "shortdesc": "shortdesc_autotask_psa_integration_00A65", "shortdesc_autotask_psa_integration_00A65": "Overview of the Autotask PSA integration with WithSecure Elements for managed service providers (MSPs).", "content.p_autotask_psa_integration_0FAB7": "WithSecure Elements provides a built-in integration with Autotask PSA to help MSPs automate cybersecurity workflows. The integration supports Advanced Endpoint Protection, Exposure Management, Extended Detection and Response (XDR), and Managed Detection and Response (MDR) services through the WithSecure Elements Cloud platform.", "content.p_autotask_psa_integration_0C654": "The integration enables a comprehensive, multi-tenant, and single-agent solution. where security events in Elements automatically generate tickets in Autotask PSA. These tickets include deep links back to detailed information in Elements Security Center.", "content.p_autotask_psa_integration_02E68": "Configuration is performed centrally in Elements Security Center. It uses Autotask API credentials to establish a secure connection and to map customer accounts for automated ticket creation.", "desc": [ "content.p_autotask_psa_integration_0FAB7", "content.p_autotask_psa_integration_0C654", "content.p_autotask_psa_integration_02E68" ] }, "getting_integration_credentials_from_autotask-latest-en.json": { "title": "title_getting_integration_cred_0E27C", "title_getting_integration_cred_0E27C": "Get integration credentials from Autotask", "shortdesc": "shortdesc_getting_integration_cred_03C85", "shortdesc_getting_integration_cred_03C85": "To integrate Autotask PSA with WithSecure Elements, you must create an API user in Autotask PSA and collect the required credentials.", "step.step_getting_integration_cred_0D32A": "Log in to the Autotask PSA management console at the Autotask website.", "step.step_getting_integration_cred_0AB0C": "In the navigation panel, select Admin.", "step.step_getting_integration_cred_0CED5": "Under Admin categories, select Organization settings and users.", "step.step_getting_integration_cred_0CBF4": "Open Resources/Users (HR) and select Resources/Users.", "step.step_getting_integration_cred_00F7E": "From the New dropdown list, select New API User.", "content.note_getting_integration_cred_0BC95": "Note: Selecting API user (system) Can't Read Costs from the Security Level options is sufficient.", "step.step_getting_integration_cred_0771C": "In new Add API user popup window, fill the required general settings, such as names and email address.", "step.step_getting_integration_cred_071BA": "Under Credentials, select Generate key and Generate secret.", "step.step_getting_integration_cred_021A7": "Copy the key and secret that you want to use in Elements Security Center.", "step.step_getting_integration_cred_0499E": "Under API Tracking Identifier, select Integration vendor, then select WithSecure.", "step.step_getting_integration_cred_0EB72": "Select Save & Close.", "content.p_getting_integration_cred_0D954": "The following credentials are required when configuring the integration in Elements Security Center:", "choice.choice_getting_integration_cred_0ECA9": "API username/key", "choice.choice_getting_integration_cred_0FB37": "API password/secret", "desc": [ { "steps.steps_getting_integration_cred_08945": [ "step.step_getting_integration_cred_0D32A", "step.step_getting_integration_cred_0AB0C", "step.step_getting_integration_cred_0CED5", "step.step_getting_integration_cred_0CBF4", "step.step_getting_integration_cred_00F7E", "step.step_getting_integration_cred_0771C", "content.note_getting_integration_cred_0BC95", "step.step_getting_integration_cred_071BA", "step.step_getting_integration_cred_021A7", "step.step_getting_integration_cred_0499E", "step.step_getting_integration_cred_0EB72" ] }, "content.p_getting_integration_cred_0D954", { "choices.ul_getting_integration_cred_049B4": [ "choice.choice_getting_integration_cred_0ECA9", "choice.choice_getting_integration_cred_0FB37" ] } ] }, "configuring_autotask_integration-latest-en.json": { "title": "title_configuring_autotask_int_04F03", "title_configuring_autotask_int_04F03": "Configure Autotask PSA integration in Elements Security Center", "shortdesc": "shortdesc_configuring_autotask_int_0E3AC", "shortdesc_configuring_autotask_int_0E3AC": "You can connect WithSecure Elements to Autotask PSA using API credentials and by selecting the ticket queue for automated tickets.", "content.p_configuring_autotask_int_08DDC": "To configure the Autotask integration:", "step.step_configuring_autotask_int_0BB60": "Log in to Elements Security Center.", "step.step_configuring_autotask_int_0F83A": "Go to Managements > Integrations .", "content.p_configuring_autotask_int_0841D": "The Autotask integration pane opens.", "step.step_configuring_autotask_int_02569": "Under Available PSA/RMM Integrations, select Configure next to Autotask.", "step.step_configuring_autotask_int_00C6A": "In the Connect view, enter the API username and API password that you copied from Autotask management console.", "step.step_configuring_autotask_int_01210": "Select Connect to validate the connection and load Autotask queue definitions.", "step.step_configuring_autotask_int_046CD": "Select the queue where you want WithSecure Elements to create tickets and select Save.", "content.p_configuring_autotask_int_0E6A5": "The integration is now active. After completing these steps and finishing the company mapping, events generated in Elements automatically create tickets in Autotask PSA. The tickets appear in Autotask PSA with the essential details about the related Elements activity and include deep links to Elements Security Center.", "desc": [ "content.p_configuring_autotask_int_08DDC", { "steps.steps_configuring_autotask_int_0CC3E": [ "step.step_configuring_autotask_int_0BB60", "step.step_configuring_autotask_int_0F83A", "step.step_configuring_autotask_int_02569", "content.p_configuring_autotask_int_0841D", "step.step_configuring_autotask_int_00C6A", "step.step_configuring_autotask_int_01210", "step.step_configuring_autotask_int_046CD" ] }, "content.p_configuring_autotask_int_0E6A5" ] }, "connectwise_psa_integration-latest-en.json": { "title": "title_connectwise_psa_integrat_06EDD", "title_connectwise_psa_integrat_06EDD": "Integrating WithSecure Elements with ConnectWise PSA", "shortdesc": "shortdesc_connectwise_psa_integrat_060F5", "shortdesc_connectwise_psa_integrat_060F5": "Overview of the integration between WithSecure Elements and ConnectWise PSA for managed service providers (MSPs). ", "content.p_connectwise_psa_integrat_0ECC9": "WithSecure Elements provides a built-in integration with ConnectWise PSA to help MSPs automate cybersecurity workflows. The integration supports multi-tenant environments and enables automated ticket creation for events that are originating from Elements Security Center.", "content.p_connectwise_psa_integrat_053F8": "This integration helps MSPs streamline delivery of services such as Advanced Endpoint Protection, Exposure Management, Extended Detection and Response (XDR), and Managed Detection and Response (MDR). It uses API keys that are generated in the ConnectWise PSA management console and configuration settings that are applied in Elements Security Center.", "content.p_connectwise_psa_integrat_0C13C": "You can use the integration to accomplish the following:", "step.step_connectwise_psa_integrat_0BCBD": "Automated ticket creation in ConnectWise PSA based on Elements activity", "step.step_connectwise_psa_integrat_0EF23": "Support for multi-tenant MSP environments", "step.step_connectwise_psa_integrat_07770": "Centralized configuration within Elements Security Center", "step.step_connectwise_psa_integrat_08009": "Linking customer accounts using ConnectWise company identifiers", "desc": [ "content.p_connectwise_psa_integrat_0ECC9", "content.p_connectwise_psa_integrat_053F8", "content.p_connectwise_psa_integrat_0C13C", { "steps.ul_connectwise_psa_integrat_045E3": [ "step.step_connectwise_psa_integrat_0BCBD", "step.step_connectwise_psa_integrat_0EF23", "step.step_connectwise_psa_integrat_07770", "step.step_connectwise_psa_integrat_08009" ] } ] }, "configuring_connectwise_psa_integration_in_elements_security_center-latest-en.json": { "title": "title_configuring_connectwise__0101D", "title_configuring_connectwise__0101D": "Configure ConnectWise PSA integration in Elements Security Center", "shortdesc": "shortdesc_configuring_connectwise__02F06", "shortdesc_configuring_connectwise__02F06": "You can connect WithSecure Elements to ConnectWise PSA by generating API keys in ConnectWise and applying the configuration in Elements Security Center to enable automated ticket creation and customer mapping across multi‑tenant environments.", "content.p_configuring_connectwise__0B45A": "Administrator access to the ConnectWise PSA management console is required to configure the integration.", "content.p_configuring_connectwise__0DF95": "To configure the ConnectWise PSA integration:", "substep.substep_configuring_connectwise__04220": "Open the user menu and select My Account.", "substep.substep_configuring_connectwise__0D477": "Select the API Keys tab and select the + icon to create a new API key.", "substep.substep_configuring_connectwise__0A3A1": "Enter a description, for example, WithSecure Elements.", "substep.substep_configuring_connectwise__06E0A": "Save the entry to generate the public and private keys.", "substep.substep_configuring_connectwise__01013": "Copy both keys for later use.", "step.step_configuring_connectwise__0C28D": "In the ConnectWise PSA management console, generate API keys as follows:", "subchoice.choice_configuring_connectwise__06D73": "Company ID used to log in to ConnectWise PSA", "subchoice.choice_configuring_connectwise__0A4F1": "Public API key", "content.p_configuring_connectwise__0F3A9": "", "step.step_configuring_connectwise__095AD": "Collect the following required information for Elements Security Center:", "step.step_configuring_connectwise__05002": "In Elements Security Center, go to Management > Integrations .", "content.p_configuring_connectwise__082AA": "The ConnectWise Integration pane opens.", "step.step_configuring_connectwise__0F868": "Under My Configured Services, next to ConnectWise PSA, select Configure integration.", "content.note_configuring_connectwise__0807C": "Note: It is the same as your ConnectWise PSA management console URL", "substep.substep_configuring_connectwise__09ED0": "From the drop-down menu, select the correct tenant.", "content.note_configuring_connectwise__0055C": "Note: It is the same as your ConnectWise PSA management console company ID.", "substep.substep_configuring_connectwise__036E4": "Enter the company ID.", "substep.substep_configuring_connectwise__07FA1": "Enter the public and private API keys.", "substep.substep_configuring_connectwise__0E25D": "Select Connect to validate connectivity.", "substep.substep_configuring_connectwise__0135F": "Save the configuration.", "step.step_configuring_connectwise__0C6A2": "Configure the settings as follows:", "content.p_configuring_connectwise__0FF41": "The integration is now active. After completing these steps and finishing the company mapping, events generated in Elements automatically create tickets in ConnectWise PSA. The tickets appear in ConnectWise PSA with the essential details about the related Elements activity and include deep links to Elements Security Center.", "desc": [ "content.p_configuring_connectwise__0B45A", "content.p_configuring_connectwise__0DF95", { "steps.steps_configuring_connectwise__0CA62": [ "step.step_configuring_connectwise__0C28D", { "substeps.substepsalpha_configuringalpha_connectwisealpha_alpha_02A29": [ "substep.substep_configuring_connectwise__04220", "substep.substep_configuring_connectwise__0D477", "substep.substep_configuring_connectwise__0A3A1", "substep.substep_configuring_connectwise__06E0A", "substep.substep_configuring_connectwise__01013" ] }, "step.step_configuring_connectwise__095AD", "content.p_configuring_connectwise__0F3A9", { "subchoices.ul_configuring_connectwise__09B68": [ "subchoice.choice_configuring_connectwise__06D73", "subchoice.choice_configuring_connectwise__0A4F1" ] }, "step.step_configuring_connectwise__05002", "step.step_configuring_connectwise__0F868", "content.p_configuring_connectwise__082AA", "step.step_configuring_connectwise__0C6A2", { "substeps.substepsalpha_configuringalpha_connectwisealpha_alpha_0B2D2": [ "substep.substep_configuring_connectwise__09ED0", "content.note_configuring_connectwise__0807C", "substep.substep_configuring_connectwise__036E4", "content.note_configuring_connectwise__0055C", "substep.substep_configuring_connectwise__07FA1", "substep.substep_configuring_connectwise__0E25D", "substep.substep_configuring_connectwise__0135F" ] } ] }, "content.p_configuring_connectwise__0FF41" ] }, "halopsa_integration-latest-en.json": { "title": "title_halopsa_integration_000001085E", "title_halopsa_integration_000001085E": "Integrating WithSecure Elements with HaloPSA", "shortdesc": "shortdesc_halopsa_integration_000002A50E", "shortdesc_halopsa_integration_000002A50E": "Overview of the HaloPSA integration with WithSecure Elements for managed service providers (MSPs).", "content.p_halopsa_integration_0000137795": "WithSecure Elements provides a built-in integration with HaloPSA, enabling automated ticket creation and streamlined service workflows for MSPs. This integration helps unify cybersecurity operations across multiple customer environments.", "content.p_halopsa_integration_0000160E18": "This integration helps MSPs streamline delivery of services such as Advanced Endpoint Protection, Exposure Management, Extended Detection and Response (XDR), and Managed Detection and Response (MDR). The integration uses API credentials that are created in HaloPSA and configuration settings that are applied in Elements Security Center.", "content.p_halopsa_integration_00001DE0E2": "You can use the integration to accomplish the following:", "step.step_halopsa_integration_00001FAD84": "Automated ticket creation in HaloPSA based on Elements activity", "step.step_halopsa_integration_000021E4B2": "Support for multi-tenant MSP environments", "step.step_halopsa_integration_000022DC56": "Centralized configuration within Elements Security Center", "step.step_halopsa_integration_000024C7FE": "Linking customer accounts using HaloPSA reference IDs", "desc": [ "content.p_halopsa_integration_0000137795", "content.p_halopsa_integration_0000160E18", "content.p_halopsa_integration_00001DE0E2", { "steps.ul_halopsa_integration_00001EB19E": [ "step.step_halopsa_integration_00001FAD84", "step.step_halopsa_integration_000021E4B2", "step.step_halopsa_integration_000022DC56", "step.step_halopsa_integration_000024C7FE" ] } ] }, "configuring_halopsa_integration-latest-en.json": { "title": "title_configuring_halopsa_inte_0ADFF", "title_configuring_halopsa_inte_0ADFF": "Configure HaloPSA integration in Elements Security Center", "shortdesc": "shortdesc_configuring_halopsa_inte_0B8DA", "shortdesc_configuring_halopsa_inte_0B8DA": "You can connect WithSecure Elements to HaloPSA creating API credentials and configuring the integration.", "content.p_configuring_halopsa_inte_0F677": "To configure the HaloPSA integration:", "substep.substep_configuring_halopsa_inte_04BA7": "Log in to your HaloPSA account.", "substep.substep_configuring_halopsa_inte_08E84": "Go to Configurations > Integrations .", "substep.substep_configuring_halopsa_inte_0D93D": "Select HaloPSA API.", "substep.substep_configuring_halopsa_inte_03B77": "Under Applications, select View applications.", "substep.substep_configuring_halopsa_inte_05EB7": "At the top-right corner, select +New and enter a name, for example, WithSecure Elements.", "substep.substep_configuring_halopsa_inte_0334A": "Make sure that the application is marked as active.", "substep.substep_configuring_halopsa_inte_0439B": "Select Client ID and secret as the authentication method.", "substep.substep_configuring_halopsa_inte_0C78B": "Copy the generated Client ID and Client Secret.", "substep.substep_configuring_halopsa_inte_0A570": "Set login type to Agent and select the agent identity used for ticket creation.", "step.step_configuring_halopsa_inte_00DF6": "Create API credentials in HaloPSA as follows:", "step.step_configuring_halopsa_inte_06D6E": "In Elements Security Center, go to Management > Integrations", "content.p_configuring_halopsa_inte_0A2CA": "The HaloPSA Integration pane opens.", "step.step_configuring_halopsa_inte_03CD8": "Under My Configured Services, next to HaloPSA, select Configure integration.", "substep.substep_configuring_halopsa_inte_01BB2": "Enter the HaloPSA tenant URL.", "substep.substep_configuring_halopsa_inte_029E8": "Enter the client ID and client secret from HaloPSA.", "substep.substep_configuring_halopsa_inte_022A4": "Select Connect to validate connectivity.", "substep.substep_configuring_halopsa_inte_05514": "Save the configuration.", "step.step_configuring_halopsa_inte_04918": "Configure the settings as follows:", "content.p_configuring_halopsa_inte_004B9": "The integration is now active. After completing these steps and finishing the company mapping, events generated in Elements automatically create tickets in HaloPSA. The tickets appear in HaloPSA with the essential details about the related Elements activity and include deep links to Elements Security Center.", "desc": [ "content.p_configuring_halopsa_inte_0F677", { "steps.steps_configuring_halopsa_inte_0B6A1": [ "step.step_configuring_halopsa_inte_00DF6", { "substeps.substepsalpha_configuringalpha_halopsaalpha_intealpha_03C6A": [ "substep.substep_configuring_halopsa_inte_04BA7", "substep.substep_configuring_halopsa_inte_08E84", "substep.substep_configuring_halopsa_inte_0D93D", "substep.substep_configuring_halopsa_inte_03B77", "substep.substep_configuring_halopsa_inte_05EB7", "substep.substep_configuring_halopsa_inte_0334A", "substep.substep_configuring_halopsa_inte_0439B", "substep.substep_configuring_halopsa_inte_0C78B", "substep.substep_configuring_halopsa_inte_0A570" ] }, "step.step_configuring_halopsa_inte_06D6E", "step.step_configuring_halopsa_inte_03CD8", "content.p_configuring_halopsa_inte_0A2CA", "step.step_configuring_halopsa_inte_04918", { "substeps.substepsalpha_configuringalpha_halopsaalpha_intealpha_0A38B": [ "substep.substep_configuring_halopsa_inte_01BB2", "substep.substep_configuring_halopsa_inte_029E8", "substep.substep_configuring_halopsa_inte_022A4", "substep.substep_configuring_halopsa_inte_05514" ] } ] }, "content.p_configuring_halopsa_inte_004B9" ] }, "what_is_elements_rbac-latest-en.json": { "title": "title_what_is_elements_rbac_0000AF7D", "title_what_is_elements_rbac_0000AF7D": "Access control", "shortdesc": "shortdesc_what_is_elements_rbac_00005A06", "shortdesc_what_is_elements_rbac_00005A06": "Elements Role-Based Access Control (RBAC) is the access management system for WithSecure Elements Security Center, controlling who can access the portal, what actions they can perform, and which organizational resources they can manage.", "content.p_what_is_elements_rbac_00000776": "Elements RBAC is a new access control approach under Management > Access Control . For standard user and access control configuration, see the User management chapter.", "content.p_what_is_elements_rbac_00004739": "Elements RBAC implements an industry-standard role-based access control model that links three components:", "content.dt_what_is_elements_rbac_00004B08": "Subject", "content.dd_what_is_elements_rbac_0000268A": "Who gets access (a security administrator or a security group).", "content.dt_what_is_elements_rbac_0000DB4E": "Role", "content.dd_what_is_elements_rbac_00000BF8": "What permissions are granted (a set of allowed actions, such as can manage users or can view vulnerability reports).", "content.dt_what_is_elements_rbac_0000E7F1": "Resource", "content.dd_what_is_elements_rbac_0000F27D": "Where the permissions apply (always an organization in Elements).", "content.p_what_is_elements_rbac_00006E12": "Elements RBAC supports a multi-tenant architecture in which three parties interact:", "step.step_what_is_elements_rbac_000027C7": "WithSecure develops and maintains the Elements Security Center platform.", "step.step_what_is_elements_rbac_0000C17F": "Partners, typically Managed Service Providers (MSPs), resell WithSecure Elements and provide security services to multiple customers.", "step.step_what_is_elements_rbac_00001ACF": "Companies are end customers that use Elements to protect their IT infrastructure.", "content.p_what_is_elements_rbac_00007077": "Elements RBAC addresses the unique challenges of the partner-customer model by allowing partners to manage hundreds of customer environments efficiently while maintaining strict security boundaries between them.", "desc": [ "content.p_what_is_elements_rbac_00000776", "content.p_what_is_elements_rbac_00004739", { "dl.dl_what_is_elements_rbac_00006026": [ { "dlentry.dlentry_what_is_elements_rbac_00005229": [ "content.dt_what_is_elements_rbac_00004B08", "content.dd_what_is_elements_rbac_0000268A" ] }, { "dlentry.dlentry_what_is_elements_rbac_0000DA75": [ "content.dt_what_is_elements_rbac_0000DB4E", "content.dd_what_is_elements_rbac_00000BF8" ] }, { "dlentry.dlentry_what_is_elements_rbac_00002BB2": [ "content.dt_what_is_elements_rbac_0000E7F1", "content.dd_what_is_elements_rbac_0000F27D" ] } ] }, "content.p_what_is_elements_rbac_00006E12", { "steps.ul_what_is_elements_rbac_0000A348": [ "step.step_what_is_elements_rbac_000027C7", "step.step_what_is_elements_rbac_0000C17F", "step.step_what_is_elements_rbac_00001ACF" ] }, "content.p_what_is_elements_rbac_00007077" ], "related": [ "getting_started-latest-en" ] }, "core_concepts-latest-en.json": { "title": "title_core_concepts_000001_8A5BE290", "title_core_concepts_000001_8A5BE290": "Core concepts", "shortdesc": "shortdesc_core_concepts_000002_9CE646CA", "shortdesc_core_concepts_000002_9CE646CA": "Elements RBAC builds on a small set of core concepts: organizations, security administrators, security groups, roles, and role assignments.", "content.p_core_concepts_000011_BC4A1F79": "These topics define the building blocks of Elements RBAC. Read them in order the first time, then return to them as a reference when you set up your environment or troubleshoot access.", "desc": [ "content.p_core_concepts_000011_BC4A1F79" ] }, "the_partner_compay_business_model-latest-en.json": { "title": "title_the_partner_company_busi_0386D", "title_the_partner_company_busi_0386D": "The partner-company business model", "shortdesc": "shortdesc_the_partner_company_busi_04B50", "shortdesc_the_partner_company_busi_04B50": "Elements RBAC is designed around a three-party business model that allows partners to manage many customer Companies while keeping each customer isolated from the others.", "content.p_the_partner_company_busi_04CDF": "Elements RBAC reflects the structure of WithSecure's business: a security platform delivered by a vendor, offered to customers through partners that provide managed services. This shapes the way access is granted, restricted, and inherited across organizations.", "content.title_the_partner_company_busi_03832": "The three parties", "content.dt_the_partner_company_busi_0DB13": "WithSecure", "content.dd_the_partner_company_busi_06309": "Develops and maintains the Elements Security Center platform.", "content.dt_the_partner_company_busi_0F98F": "Partners", "content.dd_the_partner_company_busi_01470": "Typically Managed Service Providers (MSPs). Partners resell WithSecure Elements subscriptions to end customers and provide managed security services. They monitor and respond to security events, and manage multiple customer environments from a single interface.", "content.dt_the_partner_company_busi_07EF1": "Companies", "content.dd_the_partner_company_busi_0141A": "The end customers. Companies purchase Elements either through a partner or directly from WithSecure and use the platform to protect their IT infrastructure. Companies operate in isolation from other customers.", "content.title_the_partner_company_busi_0B66D": "Architectural principles", "content.p_the_partner_company_busi_0FC99": "Three principles shape how Elements RBAC supports this business model:", "content.dt_the_partner_company_busi_07339": "Multi-tenancy", "content.dd_the_partner_company_busi_0486C": "A single Elements deployment serves thousands of isolated customer Companies. Each Company operates as if it were the only tenant on the platform.", "content.dt_the_partner_company_busi_08E81": "Partner visibility", "content.dd_the_partner_company_busi_00367": "Partners see and manage all their customer Companies from a single interface, switching between organizations through the Scope Selector. This makes it practical to manage hundreds of customer environments from one console.", "content.dt_the_partner_company_busi_08F65": "Customer isolation", "content.dd_the_partner_company_busi_0B237": "Each Company is invisible to every other Company. A Company also cannot see the partner's internal structure, the partner's other customers, or the partner's internal users.", "content.title_the_partner_company_busi_06F39": "What this architecture delivers", "content.dt_the_partner_company_busi_0B665": "Scalability", "content.dd_the_partner_company_busi_0B6DA": "Partners manage hundreds of customers from one platform.", "content.dt_the_partner_company_busi_037CF": "Security", "content.dd_the_partner_company_busi_0B2BE": "Organizational boundaries prevent cross-tenant data access.", "content.dt_the_partner_company_busi_04BE1": "Simplicity", "content.dd_the_partner_company_busi_0F944": "Each Company experiences a single-tenant view.", "desc": [ "content.p_the_partner_company_busi_04CDF", "content.title_the_partner_company_busi_03832", { "dl.dl_the_partner_company_busi_0AD07": [ { "dlentry.dlentry_the_partner_company_busi_0F46F": [ "content.dt_the_partner_company_busi_0DB13", "content.dd_the_partner_company_busi_06309" ] }, { "dlentry.dlentry_the_partner_company_busi_0D1FC": [ "content.dt_the_partner_company_busi_0F98F", "content.dd_the_partner_company_busi_01470" ] }, { "dlentry.dlentry_the_partner_company_busi_09FF1": [ "content.dt_the_partner_company_busi_07EF1", "content.dd_the_partner_company_busi_0141A" ] } ] }, "content.title_the_partner_company_busi_0B66D", "content.p_the_partner_company_busi_0FC99", { "dl.dl_the_partner_company_busi_0AEAB": [ { "dlentry.dlentry_the_partner_company_busi_0F115": [ "content.dt_the_partner_company_busi_07339", "content.dd_the_partner_company_busi_0486C" ] }, { "dlentry.dlentry_the_partner_company_busi_06C2E": [ "content.dt_the_partner_company_busi_08E81", "content.dd_the_partner_company_busi_00367" ] }, { "dlentry.dlentry_the_partner_company_busi_0583D": [ "content.dt_the_partner_company_busi_08F65", "content.dd_the_partner_company_busi_0B237" ] } ] }, "content.title_the_partner_company_busi_06F39", { "dl.dl_the_partner_company_busi_005F7": [ { "dlentry.dlentry_the_partner_company_busi_0F0E4": [ "content.dt_the_partner_company_busi_0B665", "content.dd_the_partner_company_busi_0B6DA" ] }, { "dlentry.dlentry_the_partner_company_busi_0728C": [ "content.dt_the_partner_company_busi_037CF", "content.dd_the_partner_company_busi_0B2BE" ] }, { "dlentry.dlentry_the_partner_company_busi_097F8": [ "content.dt_the_partner_company_busi_04BE1", "content.dd_the_partner_company_busi_0F944" ] } ] } ], "related": [ "visibility_and_isolation_between_organizations-latest-en" ] }, "the_subject_role_ressource_model-latest-en.json": { "title": "title_the_subject_role_resourc_09AE8", "title_the_subject_role_resourc_09AE8": "The subject-role-resource model", "shortdesc": "shortdesc_the_subject_role_resourc_0A1BB", "shortdesc_the_subject_role_resourc_0A1BB": "Elements RBAC follows the industry-standard subject-role-resource model: every grant of access combines a subject (who), a role (what), and a resource (where).", "content.p_the_subject_role_resourc_0610C": "Access in Elements is never expressed as a property of a single security administrator or a single organization on its own. Instead, every grant of access links three components together:", "content.dt_the_subject_role_resourc_0BD8D": "Subject: who gets access", "content.dd_the_subject_role_resourc_0E2B9": "", "content.dd_p_the_subject_role_resourc_079A6": "The entity that receives permissions. A subject is either:
", "content.dt_the_subject_role_resourc_0607E": "A security administrator", "content.dd_the_subject_role_resourc_0A5C6": "An individual person with an account in the Elements portal.", "content.dt_the_subject_role_resourc_046B1": "A security group", "content.dd_the_subject_role_resourc_0D3A2": "A collection of security administrators that share the same permissions.", "content.dt_the_subject_role_resourc_0A4DF": "Role: what permissions are granted", "content.dd_the_subject_role_resourc_0314C": "A defined set of low-level permissions describing which actions are allowed. Roles are not job titles. They are specific capability sets such as Identity and Access Management (IAM) Administrator, Vulnerability Management: Reading, or Elements Editing All. A role only grants permissions; it never denies them.", "content.dt_the_subject_role_resourc_08507": "Resource: where the permissions apply", "content.dd_the_subject_role_resourc_0BCD7": "An organization in Elements RBAC. The resource defines the scope of the access (for example, the entire partner hierarchy, a single Service Partner, or a specific Company).", "content.title_the_subject_role_resourc_00E2F": "The three components combine in a role assignment", "content.p_the_subject_role_resourc_071E6": "A role assignment is the operation that links subject, role, and resource, and is the only way to grant access in Elements RBAC. For example:", "content.p_the_subject_role_resourc_0C07B": "Every permission a security administrator has in Elements comes from a role assignment.", "desc": [ "content.p_the_subject_role_resourc_0610C", { "dl.dl_the_subject_role_resourc_04263": [ { "dlentry.dlentry_the_subject_role_resourc_04BEA": [ "content.dt_the_subject_role_resourc_0BD8D", "content.dd_the_subject_role_resourc_0E2B9", "content.dd_p_the_subject_role_resourc_079A6", { "dl.dl_the_subject_role_resourc_04169": [ { "dlentry.dlentry_the_subject_role_resourc_0F726": [ "content.dt_the_subject_role_resourc_0607E", "content.dd_the_subject_role_resourc_0A5C6" ] }, { "dlentry.dlentry_the_subject_role_resourc_00102": [ "content.dt_the_subject_role_resourc_046B1", "content.dd_the_subject_role_resourc_0D3A2" ] } ] } ] }, { "dlentry.dlentry_the_subject_role_resourc_0D179": [ "content.dt_the_subject_role_resourc_0A4DF", "content.dd_the_subject_role_resourc_0314C" ] }, { "dlentry.dlentry_the_subject_role_resourc_0080F": [ "content.dt_the_subject_role_resourc_08507", "content.dd_the_subject_role_resourc_0BCD7" ] } ] }, "content.title_the_subject_role_resourc_00E2F", "content.p_the_subject_role_resourc_071E6", "content.p_the_subject_role_resourc_0C07B" ], "related": [ "role_assignments-latest-en" ] }, "organization_overview-latest-en.json": { "title": "title_what_is_an_organization_0093E2", "title_what_is_an_organization_0093E2": "What is an organization", "shortdesc": "shortdesc_what_is_an_organization_00955F", "shortdesc_what_is_an_organization_00955F": "An organization is the fundamental container in Elements RBAC, holding security administrators, security groups, and role assignments.", "content.p_what_is_an_organization_00DCBB": "An organization is the foundational building block of Elements RBAC. Every security administrator, security group, and role assignment belongs to an organization. Organizations also define the scope of access. A role assignment specifies which organization the permissions apply to.", "content.p_what_is_an_organization_0099E6": "In the subject-role-resource model, an organization is the resource that defines where access applies.", "content.title_what_is_an_organization_003295": "Why organizations matter", "content.p_what_is_an_organization_004972": "Organizations are the foundation that allows Elements to serve many customers from one system:", "content.dt_what_is_an_organization_004A25": "Security", "content.dd_what_is_an_organization_00248B": "Organizational boundaries prevent unauthorized cross-tenant access.", "content.dt_what_is_an_organization_0062BE": "Multi-tenancy", "content.dd_what_is_an_organization_00EC21": "One Elements deployment can serve many isolated customer organizations.", "content.dt_what_is_an_organization_0046F5": "Scalability", "content.dd_what_is_an_organization_0048C9": "Partners can manage hundreds of companies efficiently because each is its own organization.", "content.dt_what_is_an_organization_004033": "Delegation", "content.dd_what_is_an_organization_00D9C0": "Company-level Identity and Access Management (IAM) administrators can manage access within their organization without seeing other organizations.", "content.dt_what_is_an_organization_006EBF": "Compliance", "content.dd_what_is_an_organization_003F3C": "Data and user management are segregated by organization, supporting regulatory requirements.", "desc": [ "content.p_what_is_an_organization_00DCBB", "content.p_what_is_an_organization_0099E6", "content.title_what_is_an_organization_003295", "content.p_what_is_an_organization_004972", { "dl.dl_what_is_an_organization_0067ED": [ { "dlentry.dlentry_what_is_an_organization_00ECD7": [ "content.dt_what_is_an_organization_004A25", "content.dd_what_is_an_organization_00248B" ] }, { "dlentry.dlentry_what_is_an_organization_0070A9": [ "content.dt_what_is_an_organization_0062BE", "content.dd_what_is_an_organization_00EC21" ] }, { "dlentry.dlentry_what_is_an_organization_00905A": [ "content.dt_what_is_an_organization_0046F5", "content.dd_what_is_an_organization_0048C9" ] }, { "dlentry.dlentry_what_is_an_organization_00F4BD": [ "content.dt_what_is_an_organization_004033", "content.dd_what_is_an_organization_00D9C0" ] }, { "dlentry.dlentry_what_is_an_organization_00DB56": [ "content.dt_what_is_an_organization_006EBF", "content.dd_what_is_an_organization_003F3C" ] } ] } ], "related": [ "the_subject_role_ressource_model-latest-en" ] }, "organization_and_hierarchy-latest-en.json": { "title": "title_organizational_hierarchy_0BC33", "title_organizational_hierarchy_0BC33": "Organizational hierarchy and inheritance", "shortdesc": "shortdesc_organizational_hierarchy_02109", "shortdesc_organizational_hierarchy_02109": "Elements RBAC organizations form a three-level hierarchy in which role assignments at a higher level automatically apply to all organizations below.", "content.p_organizational_hierarchy_05257": "The organizational hierarchy has three levels: Solution Provider at the top, Service Partner as a recommended middle level, and Company at the bottom. Every partner should create at least one Service Partner, even a single one grouping all Companies, because it is the only level from which roles such as IAM Administrator, API Key Management, and Audit Log access can be scoped to Companies without also granting them across the partner's own internal organization. A Solution Provider can contain Service Partners and Companies directly. A Service Partner can contain Companies. A Company cannot contain any other organization.", "content.p_organizational_hierarchy_0FCA7": "This hierarchy is the structure that allows partners to manage many customers efficiently while keeping permissions and visibility correctly scoped.", "content.title_organizational_hierarchy_074E4": "How inheritance works", "content.p_organizational_hierarchy_07415": "Role assignments made at a parent organization automatically apply to all descendant organizations through inheritance. Inheritance flows downward only. A role assigned at one organization never grants access at higher levels.", "step.step_organizational_hierarchy_01EE9": "A role assigned at the Solution Provider level applies to all Service Partners and Companies below it.", "step.step_organizational_hierarchy_08F44": "A role assigned at a Service Partner level applies to all Companies grouped under that Service Partner.", "step.step_organizational_hierarchy_00033": "A role assigned at a Company level applies only to that Company.", "content.p_organizational_hierarchy_04B7E": "For example, granting three roles to a partner team at the Solution Provider level creates three role assignments that apply across all 100 managed companies, rather than the 300 assignments that would be needed without inheritance. When a new Company is added under the partner, it automatically inherits these role assignments. No additional configuration is needed for the partner team to have access to the new Company.", "content.title_organizational_hierarchy_07956": "Inheritance flows downward only", "content.p_organizational_hierarchy_02DEB": "A Company never has access to its parent Service Partner or to the Solution Provider, even when it inherits role assignments from above. The inheritance relationship grants access to the receiving organization and its descendants, never to its ancestors. This is what keeps each Company isolated from the partner's internal structure.", "content.p_organizational_hierarchy_06B0C": "A Company can also opt out of inherited partner access for specific Elements features.", "desc": [ "content.p_organizational_hierarchy_05257", "content.p_organizational_hierarchy_0FCA7", "content.title_organizational_hierarchy_074E4", "content.p_organizational_hierarchy_07415", { "steps.ul_organizational_hierarchy_0FD46": [ "step.step_organizational_hierarchy_01EE9", "step.step_organizational_hierarchy_08F44", "step.step_organizational_hierarchy_00033" ] }, "content.p_organizational_hierarchy_04B7E", "content.title_organizational_hierarchy_07956", "content.p_organizational_hierarchy_02DEB", "content.p_organizational_hierarchy_06B0C" ], "related": [ "restricting_partner_access_to_a_company-latest-en" ] }, "organization_types_solution_provider_service_partner_and_company-latest-en.json": { "title": "title_organization_types_solut_0FD20", "title_organization_types_solut_0FD20": "Organization types: solution provider, service partner, and company", "shortdesc": "shortdesc_organization_types_solut_0619A", "shortdesc_organization_types_solut_0619A": "Elements RBAC has three organization types: Solution Provider, Service Partner, and Company. They represent the partner's root organization, recommended groupings of customer companies, and the end customer organizations themselves.", "content.p_organization_types_solut_05848": "Each organization in Elements RBAC is one of three types. The type determines the organization's position in the hierarchy and the operations available within it.", "content.title_organization_types_solut_09CCD": "Solution Provider", "content.p_organization_types_solut_08682": "The Solution Provider is the top level of the organizational hierarchy and the root of a partner organization. It is the recommended location for all partner security administrators and security groups. They reach managed companies through role assignments rather than through membership in those companies.", "content.p_organization_types_solut_09492": "Role assignments made at the Solution Provider level automatically inherit to all Service Partners and Companies below it.", "content.title_organization_types_solut_0F9C9": "Service Partner", "content.p_organization_types_solut_089AF": "A Service Partner is a recommended middle-level organization that groups related companies under a Solution Provider. Even partners with no need for multiple segments should create at least one Service Partner and place all companies under it, since this is the only way to restrict roles such as IAM Administrator, API Key Management, and Audit Log access to companies rather than the entire partner organization. Partner administrators are typically different individuals from the staff who provide administrative support within customer companies, so this separation matters even for small, single-team partners. Where useful, Service Partners can also segregate access and organize companies into logical clusters, for example:", "step.step_organization_types_solut_0A193": "By industry (for example, a Healthcare Service Partner and a Legal Service Partner).", "step.step_organization_types_solut_0A664": "By team (for example, Team A Service Partner and Team B Service Partner).", "step.step_organization_types_solut_0BC11": "By service tier (for example, Premium Service Partner and Standard Service Partner).", "step.step_organization_types_solut_0DD6B": "By geography (for example, an East Service Partner and a West Service Partner).", "content.p_organization_types_solut_07265": "Role assignments made at the Service Partner level inherit to all Companies grouped under it. This allows a team to be granted access to a defined subset of companies through one role assignment rather than many.", "content.note_organization_types_solut_00189": "Note: It is technically possible to add Identity and Access Management (IAM) administrators at the Service Partner level. Their visibility is then limited to that Service Partner and the Companies below it. This delegation is complex and is not recommended for most partners. The simpler pattern is to keep partner IAM administrators at the Solution Provider level and use security groups to segregate access.", "content.title_organization_types_solut_00348": "Company", "content.p_organization_types_solut_0E37D": "A Company is a customer organization and the bottom level of the hierarchy. A Company is a leaf node. It cannot have child organizations beneath it.", "content.p_organization_types_solut_09446": "Companies operate in isolation from one another. A Company cannot see other Companies managed by the same partner, and Company security administrators can only manage access within their own Company.", "content.p_organization_types_solut_03850": "The RBAC experience within a Company is simpler than at the partner level:", "step.step_organization_types_solut_00972": "The Scope Selector is locked to the Company. There is no other organization to switch to.", "step.step_organization_types_solut_0111C": "Role assignments do not require explicit scope selection; the Company is the implicit scope.", "step.step_organization_types_solut_0160C": "Security administrators and security groups all belong to the Company.", "desc": [ "content.p_organization_types_solut_05848", "content.title_organization_types_solut_09CCD", "content.p_organization_types_solut_08682", "content.p_organization_types_solut_09492", "content.title_organization_types_solut_0F9C9", "content.p_organization_types_solut_089AF", { "steps.ul_organization_types_solut_066E5": [ "step.step_organization_types_solut_0A193", "step.step_organization_types_solut_0A664", "step.step_organization_types_solut_0BC11", "step.step_organization_types_solut_0DD6B" ] }, "content.p_organization_types_solut_07265", "content.note_organization_types_solut_00189", "content.title_organization_types_solut_00348", "content.p_organization_types_solut_0E37D", "content.p_organization_types_solut_09446", "content.p_organization_types_solut_03850", { "steps.ul_organization_types_solut_032AB": [ "step.step_organization_types_solut_00972", "step.step_organization_types_solut_0111C", "step.step_organization_types_solut_0160C" ] } ] }, "security_administrator_user-latest-en.json": { "title": "title_security_administrator_u_07897", "title_security_administrator_u_07897": "What is a security administrator", "shortdesc": "shortdesc_security_administrator_u_0677F", "shortdesc_security_administrator_u_0677F": "Security administrator and portal user mean the same thing in Elements RBAC: a person who can access Elements Security Center.", "content.p_security_administrator_u_06F54": "In the subject-role-resource model, a security administrator is the subject that receives permissions. An email address identifies each security administrator and is their username. The same identity can be used throughout Elements, so one person can belong to several organizations.", "content.note_security_administrator_u_066A9": "Note: In Elements RBAC, security administrators and portal users differ from endpoint users and identities protected by Elements.", "desc": [ "content.p_security_administrator_u_06F54", "content.note_security_administrator_u_066A9" ], "related": [ "account_types_and_ownership-latest-en", "visibility_and_isolation_between_organizations-latest-en" ] }, "user_types-latest-en.json": { "title": "title_partner_and_company_user_071ED", "title_partner_and_company_user_071ED": "Partner and company users", "shortdesc": "shortdesc_partner_and_company_user_0089F", "shortdesc_partner_and_company_user_0089F": "Elements distinguishes between users who belong to a partner organization and users who belong to a customer company, and each type has a different scope of visibility and access.", "content.p_partner_and_company_user_0A5F5": "Every security administrator in Elements belongs to a single organization. That organization determines what the user sees in the portal and what the user can manage. A security administrator works in one of two contexts: as a partner user or as a company user.", "content.title_partner_and_company_user_02C38": "Partner users", "content.p_partner_and_company_user_03050": "Partner users belong to the Solution Provider organization at the top of the partner hierarchy. From there, they can see and manage the customer companies that the partner is responsible for.", "content.p_partner_and_company_user_092B7": "A partner user typically has access to multiple companies and switches between them in the Scope Selector. The access itself comes from role assignments. These assignments can target individual companies or Service Partners, or they can be made at the Solution Provider and inherited down the hierarchy to all managed companies.", "content.note_partner_and_company_user_03084": "Important: Partner users must not be added to customer companies as members. Access to a company should be granted through role assignments instead. This keeps partner users invisible to company administrators and preserves the boundary between the partner and its customers.", "content.title_partner_and_company_user_0D0EE": "Company users", "content.p_partner_and_company_user_0CA35": "Company users belong to a specific customer company. They see only that company in the Scope Selector and cannot switch to any other organization.", "content.p_partner_and_company_user_0D8A6": "The experience for a company user is simpler than for a partner user. The user works within one organization, one set of security groups, and one place where roles are assigned. Company Identity and Access Management (IAM) administrators manage other company users inside the same company organization.", "content.p_partner_and_company_user_00B48": "Partner users can operate inside the company organization through role assignments, but they remain invisible to company administrators because they are not company members.", "content.title_partner_and_company_user_085A7": "Comparison", "content.title_partner_and_company_user_06336": "Partner users compared to company users", "cell.entry_partner_and_company_user_0949C": "Attribute", "cell.entry_partner_and_company_user_0284C": "Partner user", "cell.entry_partner_and_company_user_063E6": "Company user", "cell.entry_partner_and_company_user_0C0DF": "Home organization", "cell.entry_partner_and_company_user_01FC9": "Solution Provider", "cell.entry_partner_and_company_user_0FA0F": "The specific customer company", "cell.entry_partner_and_company_user_04010": "Organizations visible in the Scope Selector", "cell.entry_partner_and_company_user_062A7": "The Solution Provider, any Service Partners, and the managed companies the user has access to", "cell.entry_partner_and_company_user_039C0": "The home company only", "cell.entry_partner_and_company_user_0D29E": "Managed by", "cell.entry_partner_and_company_user_085B9": "Partner IAM administrators at the Solution Provider", "cell.entry_partner_and_company_user_0FF6E": "Company IAM administrators, with partner IAM administrators assisting at setup", "cell.entry_partner_and_company_user_0A2A0": "Visible to company administrators", "cell.entry_partner_and_company_user_0CCBE": "No, when the recommended access model is followed", "cell.entry_partner_and_company_user_07DC7": "Yes", "desc": [ "content.p_partner_and_company_user_0A5F5", "content.title_partner_and_company_user_02C38", "content.p_partner_and_company_user_03050", "content.p_partner_and_company_user_092B7", "content.note_partner_and_company_user_03084", "content.title_partner_and_company_user_0D0EE", "content.p_partner_and_company_user_0CA35", "content.p_partner_and_company_user_0D8A6", "content.p_partner_and_company_user_00B48", "content.title_partner_and_company_user_085A7", "content.title_partner_and_company_user_06336", { "table.table_partner-users-compared-to-1FA3": [ { "thead.thead_partner_and_company_user_0EA5D": [ "cell.entry_partner_and_company_user_0949C", "cell.entry_partner_and_company_user_0284C", "cell.entry_partner_and_company_user_063E6" ] }, { "row.row_partner_and_company_user_036BC": [ "cell.entry_partner_and_company_user_0C0DF", "cell.entry_partner_and_company_user_01FC9", "cell.entry_partner_and_company_user_0FA0F" ] }, { "row.row_partner_and_company_user_098EB": [ "cell.entry_partner_and_company_user_04010", "cell.entry_partner_and_company_user_062A7", "cell.entry_partner_and_company_user_039C0" ] }, { "row.row_partner_and_company_user_0D4A9": [ "cell.entry_partner_and_company_user_0D29E", "cell.entry_partner_and_company_user_085B9", "cell.entry_partner_and_company_user_0FF6E" ] }, { "row.row_partner_and_company_user_0044A": [ "cell.entry_partner_and_company_user_0A2A0", "cell.entry_partner_and_company_user_0CCBE", "cell.entry_partner_and_company_user_07DC7" ] } ] } ] }, "security_groups-latest-en.json": { "title": "title_what_is_security_group_000821A", "title_what_is_security_group_000821A": "What is a security group", "shortdesc": "shortdesc_what_is_security_group_0004702", "shortdesc_what_is_security_group_0004702": "A security group is a container for security administrators who share the same permissions, and the recommended way to manage access at scale.", "content.p_what_is_security_group_0002A89": "A security group has two key characteristics:", "step.step_what_is_security_group_0009DB2": "It is a subject in the RBAC model and receives role assignments as does a security administrator.", "step.step_what_is_security_group_000CD31": "All members of a security group automatically inherit all of the group's role assignments.", "content.p_what_is_security_group_000126D": "Elements has two types of security groups:", "content.dt_what_is_security_group_00064C6": "Locally created groups", "content.dd_what_is_security_group_000052A": "Created manually in Elements. Can be edited, renamed, or deleted. Membership is managed in Elements.", "content.dt_what_is_security_group_000A643": "Entra-provisioned groups", "content.dd_what_is_security_group_000C3BF": "Synced automatically from Microsoft Entra ID through System for Cross-domain Identity Management (SCIM). Immutable in Elements. They cannot be edited or deleted. Membership is managed exclusively in Entra ID. Role assignments are defined in Elements.", "content.note_what_is_security_group_0008783": "Important: A security group and a security administrator must belong to the same organization to be linked.", "content.p_what_is_security_group_000631F": "We recommend using security groups to manage permissions instead of assigning roles directly to individual security administrators, for three reasons:", "content.dt_what_is_security_group_000F66B": "Scalability", "content.dd_what_is_security_group_0000495": "Changing the group's permissions updates all members automatically.", "content.dt_what_is_security_group_000F5B0": "Consistency", "content.dd_what_is_security_group_0005F74": "All team members have identical permissions.", "content.dt_what_is_security_group_00085FB": "Auditability", "content.dd_what_is_security_group_0007B56": "You can see who has what by looking at group membership.", "desc": [ "content.p_what_is_security_group_0002A89", { "steps.ul_what_is_security_group_000DB0E": [ "step.step_what_is_security_group_0009DB2", "step.step_what_is_security_group_000CD31" ] }, "content.p_what_is_security_group_000126D", { "dl.dl_what_is_security_group_000C278": [ { "dlentry.dlentry_what_is_security_group_0008AB9": [ "content.dt_what_is_security_group_00064C6", "content.dd_what_is_security_group_000052A" ] }, { "dlentry.dlentry_what_is_security_group_000C24D": [ "content.dt_what_is_security_group_000A643", "content.dd_what_is_security_group_000C3BF" ] } ] }, "content.note_what_is_security_group_0008783", "content.p_what_is_security_group_000631F", { "dl.dl_what_is_security_group_00028A6": [ { "dlentry.dlentry_what_is_security_group_0006501": [ "content.dt_what_is_security_group_000F66B", "content.dd_what_is_security_group_0000495" ] }, { "dlentry.dlentry_what_is_security_group_000F086": [ "content.dt_what_is_security_group_000F5B0", "content.dd_what_is_security_group_0005F74" ] }, { "dlentry.dlentry_what_is_security_group_0006EB7": [ "content.dt_what_is_security_group_00085FB", "content.dd_what_is_security_group_0007B56" ] } ] } ] }, "locally_created_and_provisioned_security_groups-latest-en.json": { "title": "title_locally_created_and_prov_0120B", "title_locally_created_and_prov_0120B": "Locally created and provisioned security groups", "shortdesc": "shortdesc_locally_created_and_prov_049EA", "shortdesc_locally_created_and_prov_049EA": "Security groups can be either locally created in Elements or provisioned from Microsoft Entra ID. The two types differ in how they are managed and in who can be a member.", "content.p_locally_created_and_prov_065CC": "A locally created security group is created and managed entirely within Elements. A provisioned security group is created in Microsoft Entra ID and synced to Elements through System for Cross-domain Identity Management (SCIM). In Elements, it appears as an immutable copy of the Entra group.", "content.title_locally_created_and_prov_04BCD": "How the two types differ", "content.title_locally_created_and_prov_0CAA1": "Comparison of locally created and provisioned security groups", "cell.entry_locally_created_and_prov_03956": "Aspect", "cell.entry_locally_created_and_prov_08FD2": "Locally created group", "cell.entry_locally_created_and_prov_0E696": "Provisioned group", "cell.entry_locally_created_and_prov_0EBD2": "Creation", "cell.entry_locally_created_and_prov_0493C": "Manually, in Elements", "cell.entry_locally_created_and_prov_072C9": "Automatically, by sync from Entra ID through SCIM", "cell.entry_locally_created_and_prov_0DC35": "Group name and description", "cell.entry_locally_created_and_prov_0E794": "Managed in Elements", "cell.entry_locally_created_and_prov_09DE8": "Managed in Entra ID", "cell.entry_locally_created_and_prov_06D0A": "Membership", "cell.entry_locally_created_and_prov_0DA33": "Managed in Elements", "cell.entry_locally_created_and_prov_08040": "Managed in Entra ID", "cell.entry_locally_created_and_prov_0FA98": "Role assignments", "cell.entry_locally_created_and_prov_0E606": "Managed in Elements", "cell.entry_locally_created_and_prov_0D795": "Managed in Elements", "cell.entry_locally_created_and_prov_0B4CA": "Editing and deletion in Elements", "cell.entry_locally_created_and_prov_03E15": "Allowed", "cell.entry_locally_created_and_prov_0F776": "Not allowed; the group is immutable", "content.p_locally_created_and_prov_08AE0": "Changes to a provisioned group in Entra ID sync to Elements continuously, typically within minutes. These changes include adding or removing a user, renaming the group, and deleting the group.", "content.title_locally_created_and_prov_0E1AE": "Membership rules", "content.p_locally_created_and_prov_0675F": "Two factors determine who can be added to a security group: organization membership, and whether the security group is locally created or provisioned.", "content.p_locally_created_and_prov_06AEA": "A security administrator and a security group must belong to the same organization to be linked. A Solution Provider security administrator cannot be added to a company security group. Likewise, a security administrator of one company cannot be added to a security group of another company. The combinations of security administrator type and security group type are summarized below.", "content.title_locally_created_and_prov_0EBBC": "Which security administrators can be added to which groups", "cell.entry_locally_created_and_prov_00D73": "Security administrator type", "cell.entry_locally_created_and_prov_0663F": "Locally created group", "cell.entry_locally_created_and_prov_0554D": "Provisioned group", "cell.entry_locally_created_and_prov_0F64A": "Local security administrator (invited through Elements)", "cell.entry_locally_created_and_prov_01614": "Can be added or removed through Elements", "cell.entry_locally_created_and_prov_089C3": "Cannot be added", "cell.entry_locally_created_and_prov_089CF": "Provisioned security administrator (synced from Entra ID)", "cell.entry_locally_created_and_prov_08B5D": "Can be added or removed through Elements", "cell.entry_locally_created_and_prov_050DF": "Membership managed in Entra ID", "desc": [ "content.p_locally_created_and_prov_065CC", "content.title_locally_created_and_prov_04BCD", "content.title_locally_created_and_prov_0CAA1", { "table.table_comparison-of-locally-crea6393": [ { "thead.thead_locally_created_and_prov_00374": [ "cell.entry_locally_created_and_prov_03956", "cell.entry_locally_created_and_prov_08FD2", "cell.entry_locally_created_and_prov_0E696" ] }, { "row.row_locally_created_and_prov_086F9": [ "cell.entry_locally_created_and_prov_0EBD2", "cell.entry_locally_created_and_prov_0493C", "cell.entry_locally_created_and_prov_072C9" ] }, { "row.row_locally_created_and_prov_034FD": [ "cell.entry_locally_created_and_prov_0DC35", "cell.entry_locally_created_and_prov_0E794", "cell.entry_locally_created_and_prov_09DE8" ] }, { "row.row_locally_created_and_prov_07141": [ "cell.entry_locally_created_and_prov_06D0A", "cell.entry_locally_created_and_prov_0DA33", "cell.entry_locally_created_and_prov_08040" ] }, { "row.row_locally_created_and_prov_0BA78": [ "cell.entry_locally_created_and_prov_0FA98", "cell.entry_locally_created_and_prov_0E606", "cell.entry_locally_created_and_prov_0D795" ] }, { "row.row_locally_created_and_prov_039F6": [ "cell.entry_locally_created_and_prov_0B4CA", "cell.entry_locally_created_and_prov_03E15", "cell.entry_locally_created_and_prov_0F776" ] } ] }, "content.p_locally_created_and_prov_08AE0", "content.title_locally_created_and_prov_0E1AE", "content.p_locally_created_and_prov_0675F", "content.p_locally_created_and_prov_06AEA", "content.title_locally_created_and_prov_0EBBC", { "table.table_which-security-administratA612": [ { "thead.thead_locally_created_and_prov_0699F": [ "cell.entry_locally_created_and_prov_00D73", "cell.entry_locally_created_and_prov_0663F", "cell.entry_locally_created_and_prov_0554D" ] }, { "row.row_locally_created_and_prov_0028E": [ "cell.entry_locally_created_and_prov_0F64A", "cell.entry_locally_created_and_prov_01614", "cell.entry_locally_created_and_prov_089C3" ] }, { "row.row_locally_created_and_prov_0F3BA": [ "cell.entry_locally_created_and_prov_089CF", "cell.entry_locally_created_and_prov_08B5D", "cell.entry_locally_created_and_prov_050DF" ] } ] } ] }, "role_overview-latest-en.json": { "title": "title_what_is_role_000001_F44EBD77", "title_what_is_role_000001_F44EBD77": "What is a role", "shortdesc": "shortdesc_what_is_role_000002_BA702E87", "shortdesc_what_is_role_000002_BA702E87": "A role is the set of permissions that defines what actions a security administrator can perform in Elements.", "content.p_what_is_role_000012_7DFFAE97": "In the subject-role-resource model, the role is the \"what\": the actions that the security administrator (the subject) is allowed to perform in the organization (the resource).", "content.p_what_is_role_000013_89394D3A": "A role is a set of low-level permissions, not a job title or persona. \"Identity and Access Management (IAM) Administrator\" and \"Exposure Management: Vulnerabilities: Management\" are roles; job titles such as \"Security Analyst\" or \"IT Manager\" are not modeled as roles in Elements.", "content.note_what_is_role_000014_06E9ED63": "Important: A role is meaningless without an organizational scope. For example, if a user has the IAM Administrator role but no assigned organization, the role assignment is incomplete. If the user has the IAM Administrator role in organization ABC, the role assignment is complete. The scope is specified at the moment the role is assigned, not when the role is defined.", "content.title_what_is_role_000016_FEC234E4": "Granularity", "content.p_what_is_role_000017_CA978113": "Elements offers dozens of roles, each granting access to a specific subset of functionality. Granularity allows precise access control, at the cost of more configuration effort. We recommend using security groups to compose granular roles into permission sets that can be reused across security administrators.", "content.p_what_is_role_000018_C917FB3C": "Roles fall into three categories:", "content.dt_what_is_role_00001B_8B37A249": "Standard roles", "content.dd_what_is_role_00001C_B84569B9": "Cover functional areas. Examples: \"IAM Administrator\", \"Exposure Management: Vulnerabilities: Management\".", "content.dt_what_is_role_00001E_7AD72369": "Detailed roles", "content.dd_what_is_role_00001F_0D90F615": "Cover specific actions within a functional area. Example: \"Exposure Management: Vulnerabilities: Vulnerability scans reading\".", "content.dt_what_is_role_000021_B73071B7": "Large-scope roles", "content.dd_what_is_role_000022_15F1D29B": "Provide broad read or write access across all Elements functionality. The two large-scope roles are \"Elements Editing All\" and \"Elements Reading All\".", "content.title_what_is_role_000023_01AD7F7F": "Additivity", "content.p_what_is_role_000024_8792BAF0": "Roles are additive: they only grant permissions, they never deny. A security administrator's effective permissions are the union of all permissions from all of the administrator's roles.", "step.step_what_is_role_000026_A932C116": "Multiple roles produce the sum of all their permissions.", "step.step_what_is_role_000028_FFD11633": "No role can revoke permissions granted by another role.", "step.step_what_is_role_00002A_E8F69DD5": "There is no concept of a \"deny\" role in Elements RBAC.", "step.step_what_is_role_00002C_070D77F0": "Having the same role twice has no additional effect.", "step.step_what_is_role_00002E_47D0F815": "Permissions from direct, indirect, and inherited role assignments all add together.", "content.title_what_is_role_000030_3210746C": "Combined roles", "content.p_what_is_role_000031_9A5B3469": "A security administrator has three role assignments:", "step.step_what_is_role_000033_E2594DD5": "A direct assignment of Exposure Management: Vulnerabilities: Editing.", "step.step_what_is_role_000036_F2C79E62": "An indirect assignment of Exposure Management: Reading through a security group.", "step.step_what_is_role_000039_5B9B9B17": "An inherited assignment of Response: Execute from a parent organization.", "content.p_what_is_role_00003C_2A3833F1": "The administrator can edit vulnerabilities, read exposure data, and execute responses. The three sets of permissions add together.", "desc": [ "content.p_what_is_role_000012_7DFFAE97", "content.p_what_is_role_000013_89394D3A", "content.note_what_is_role_000014_06E9ED63", "content.title_what_is_role_000016_FEC234E4", "content.p_what_is_role_000017_CA978113", "content.p_what_is_role_000018_C917FB3C", { "dl.dl_what_is_role_000019_79B3A195": [ { "dlentry.dlentry_what_is_role_00001A_56D98619": [ "content.dt_what_is_role_00001B_8B37A249", "content.dd_what_is_role_00001C_B84569B9" ] }, { "dlentry.dlentry_what_is_role_00001D_098039C1": [ "content.dt_what_is_role_00001E_7AD72369", "content.dd_what_is_role_00001F_0D90F615" ] }, { "dlentry.dlentry_what_is_role_000020_98D2158D": [ "content.dt_what_is_role_000021_B73071B7", "content.dd_what_is_role_000022_15F1D29B" ] } ] }, "content.title_what_is_role_000023_01AD7F7F", "content.p_what_is_role_000024_8792BAF0", { "steps.ul_what_is_role_000025_F65259FC": [ "step.step_what_is_role_000026_A932C116", "step.step_what_is_role_000028_FFD11633", "step.step_what_is_role_00002A_E8F69DD5", "step.step_what_is_role_00002C_070D77F0", "step.step_what_is_role_00002E_47D0F815" ] }, "content.title_what_is_role_000030_3210746C", "content.p_what_is_role_000031_9A5B3469", { "steps.ul_what_is_role_000032_96FF3577": [ "step.step_what_is_role_000033_E2594DD5", "step.step_what_is_role_000036_F2C79E62", "step.step_what_is_role_000039_5B9B9B17" ] }, "content.p_what_is_role_00003C_2A3833F1" ] }, "special_elements_roles-latest-en.json": { "title": "title_large_scope_roles_000001_F1F44", "title_large_scope_roles_000001_F1F44": "Large-scope roles: Elements Editing All and Elements Reading All", "shortdesc": "shortdesc_large_scope_roles_000002_14D1D", "shortdesc_large_scope_roles_000002_14D1D": "Elements Editing All and Elements Reading All are two special roles that grant broad access across all Elements functionality. They are continuously maintained as new features are released.", "content.p_large_scope_roles_000010_3AB39": "Two special roles provide broad access across all Elements functionality:", "content.dt_large_scope_roles_000013_9ACB9": "Elements Editing All", "content.dd_large_scope_roles_000014_932E3": "Provides full read and write access to all Elements functionality. Recommended for root user accounts.", "content.dt_large_scope_roles_000016_A5F28": "Elements Reading All", "content.dd_large_scope_roles_000017_C50AD": "Provides read-only access to all Elements functionality. Recommended for auditors and report viewers.", "content.p_large_scope_roles_000018_54909": "Both large-scope roles are continuously maintained by WithSecure, which means they automatically include access to new features as those features are released.", "content.note_large_scope_roles_00001A_C9984": "Important: Granular roles do not have this property. A security group that has been assigned every existing granular role does not automatically gain access to new features. Only the two large-scope roles are continuously maintained. To grant access to a new feature through granular roles, an Identity and Access Management (IAM) administrator must explicitly assign the new role.", "desc": [ "content.p_large_scope_roles_000010_3AB39", { "dl.dl_large_scope_roles_000011_79D5D": [ { "dlentry.dlentry_large_scope_roles_000012_FA7C9": [ "content.dt_large_scope_roles_000013_9ACB9", "content.dd_large_scope_roles_000014_932E3" ] }, { "dlentry.dlentry_large_scope_roles_000015_C9065": [ "content.dt_large_scope_roles_000016_A5F28", "content.dd_large_scope_roles_000017_C50AD" ] } ] }, "content.p_large_scope_roles_000018_54909", "content.note_large_scope_roles_00001A_C9984" ] }, "role_assignments-latest-en.json": { "title": "title_role_assignments_000001_0FBB27", "title_role_assignments_000001_0FBB27": "What is a role assignment", "shortdesc": "shortdesc_role_assignments_000002_0BA6F0", "shortdesc_role_assignments_000002_0BA6F0": "A role assignment is the fundamental operation in Elements RBAC that links a subject, a role, and a resource to grant access.", "content.p_role_assignments_000011_CAAACB": "A role assignment links a subject (who), a role (what), and a resource (where) into a single grant of access.", "content.p_role_assignments_000012_69B55D": "Every permission in Elements comes from a role assignment connecting these three components. Access is granted by creating a role assignment and revoked by deleting one.", "content.title_role_assignments_000013_C52C35": "A role assignment in practice", "content.p_role_assignments_000014_AA2B94": "Consider a role assignment with these three components:", "content.dt_role_assignments_000017_3BE096": "Subject", "content.dd_role_assignments_000018_B77777": "The SOC Team security group.", "content.dt_role_assignments_00001A_4FB480": "Role", "content.dd_role_assignments_00001B_8E4D70": "Vulnerability Management: Editing.", "content.dt_role_assignments_00001E_8A85CE": "Resource", "content.dd_role_assignments_00001F_9F8C62": "The Healthcare Service Partner organization.", "content.p_role_assignments_000020_C926CE": "The assignment grants the members of the SOC Team security group the ability to edit vulnerabilities in the Healthcare Service Partner organization.", "content.title_role_assignments_000021_E31341": "Types of role assignments", "content.p_role_assignments_000022_2CF16C": "There are three types of role assignments:", "content.dt_role_assignments_000025_4CC86B": "Direct role assignment", "content.dd_role_assignments_000026_9D7B3B": "The role is assigned directly to a security administrator, not through a security group. This type is not recommended except for special cases such as root user accounts, because it is hard to manage at scale.", "content.dt_role_assignments_000028_690887": "Indirect role assignment", "content.dd_role_assignments_000029_F5F60C": "The role is assigned to a security group, and security administrators inherit the role through their group membership. This is the recommended type because it is scalable and maintainable.", "content.dt_role_assignments_00002B_BDB08F": "Inherited role assignment", "content.dd_role_assignments_00002C_12D604": "The role is assigned at a parent organization and automatically applies to all child organizations. This type cannot be removed at the child level; the removal must happen at the parent organization where the assignment was created.", "content.title_role_assignments_00002D_DEDEFF": "Two perspectives for managing role assignments", "content.p_role_assignments_00002E_510871": "Elements presents role assignments from two perspectives:", "content.dt_role_assignments_000031_522832": "For a selected subject", "content.dd_role_assignments_000032_85393F": "The member-first approach.", "content.dt_role_assignments_000034_6B8ABB": "For a selected resource", "content.dd_role_assignments_000035_36F9DA": "The organization-first approach.", "content.p_role_assignments_000036_CFFB2E": "The same assignments are managed from both views.", "desc": [ "content.p_role_assignments_000011_CAAACB", "content.p_role_assignments_000012_69B55D", "content.title_role_assignments_000013_C52C35", "content.p_role_assignments_000014_AA2B94", { "dl.dl_role_assignments_000015_CE00C7": [ { "dlentry.dlentry_role_assignments_000016_E078FA": [ "content.dt_role_assignments_000017_3BE096", "content.dd_role_assignments_000018_B77777" ] }, { "dlentry.dlentry_role_assignments_000019_202B73": [ "content.dt_role_assignments_00001A_4FB480", "content.dd_role_assignments_00001B_8E4D70" ] }, { "dlentry.dlentry_role_assignments_00001D_96BDFF": [ "content.dt_role_assignments_00001E_8A85CE", "content.dd_role_assignments_00001F_9F8C62" ] } ] }, "content.p_role_assignments_000020_C926CE", "content.title_role_assignments_000021_E31341", "content.p_role_assignments_000022_2CF16C", { "dl.dl_role_assignments_000023_1FFAE1": [ { "dlentry.dlentry_role_assignments_000024_C3F4AE": [ "content.dt_role_assignments_000025_4CC86B", "content.dd_role_assignments_000026_9D7B3B" ] }, { "dlentry.dlentry_role_assignments_000027_68B430": [ "content.dt_role_assignments_000028_690887", "content.dd_role_assignments_000029_F5F60C" ] }, { "dlentry.dlentry_role_assignments_00002A_A4A6D7": [ "content.dt_role_assignments_00002B_BDB08F", "content.dd_role_assignments_00002C_12D604" ] } ] }, "content.title_role_assignments_00002D_DEDEFF", "content.p_role_assignments_00002E_510871", { "dl.dl_role_assignments_00002F_F5FDAC": [ { "dlentry.dlentry_role_assignments_000030_A71F99": [ "content.dt_role_assignments_000031_522832", "content.dd_role_assignments_000032_85393F" ] }, { "dlentry.dlentry_role_assignments_000033_4A06F5": [ "content.dt_role_assignments_000034_6B8ABB", "content.dd_role_assignments_000035_36F9DA" ] } ] }, "content.p_role_assignments_000036_CFFB2E" ] }, "direct_indirect_and_inherited_role_assignments-latest-en.json": { "title": "title_direct_indirect_and_inhe_084CF", "title_direct_indirect_and_inhe_084CF": "Direct, indirect, and inherited role assignments", "shortdesc": "shortdesc_direct_indirect_and_inhe_0AB7A", "shortdesc_direct_indirect_and_inhe_0AB7A": "A security administrator can receive permissions through three types of role assignments: direct, indirect, and inherited. The types differ in where the assignment is anchored and how it reaches the administrator.", "content.p_direct_indirect_and_inhe_0E9B7": "Every role assignment links a subject, a role, and a resource. What distinguishes the three types is where the assignment is anchored and how the permissions reach a security administrator's effective access.", "content.title_direct_indirect_and_inhe_0B3E5": "Direct role assignments", "content.p_direct_indirect_and_inhe_01C5B": "A direct role assignment is anchored to an individual security administrator. The administrator's email address appears as the subject of the assignment, and the assignment is not shared with any other administrator.", "content.p_direct_indirect_and_inhe_0B6D0": "In the role assignments table, a direct assignment is shown with the administrator's email as the assignee and a member type of Security Administrator. The assignment can be removed directly from the administrator's view.", "content.note_direct_indirect_and_inhe_091F2": "Note: Direct role assignments are not recommended except for special cases such as root user accounts. They are hard to manage at scale.", "content.title_direct_indirect_and_inhe_00269": "Indirect role assignments", "content.p_direct_indirect_and_inhe_0C803": "An indirect role assignment is anchored to a security group. Security administrators receive the assignment through their membership in the group. All members of the group share the same set of indirect assignments.", "content.p_direct_indirect_and_inhe_02262": "In the role assignments table, an indirect assignment is shown with the security group's name as the assignee and a member type of Security Group. An indirect assignment cannot be removed from the security administrator's own view. The administrator can lose the assignment in two ways: by being removed from the group, or by the assignment being removed from the group. Removing the assignment from the group affects all members.", "content.p_direct_indirect_and_inhe_0584B": "Indirect role assignments are the recommended type, because they scale to many security administrators and keep permissions consistent across team members.", "content.title_direct_indirect_and_inhe_09EFC": "Inherited role assignments", "content.p_direct_indirect_and_inhe_06CD3": "An inherited role assignment is anchored at a parent organization and automatically applies to all child organizations. Inheritance flows downward through the organizational hierarchy.", "content.p_direct_indirect_and_inhe_0393B": "When viewing role assignments at a child organization, inherited assignments are shown with an inherited indicator and the parent organization where the assignment was created. Inherited assignments cannot be removed at the child level. To remove an inherited assignment, navigate to the parent organization where it was created.", "content.p_direct_indirect_and_inhe_0944B": "Inheritance applies only to partner hierarchies, because only partner organizations have child organizations. Company organizations have no children, so inheritance does not apply to them.", "content.title_direct_indirect_and_inhe_0BA33": "How the three types combine", "content.p_direct_indirect_and_inhe_0E411": "A security administrator can receive permissions through all three types simultaneously. The administrator's effective permissions are the sum of all permissions from direct, indirect, and inherited assignments.", "content.title_direct_indirect_and_inhe_0ED56": "A security administrator with assignments of all three types", "content.p_direct_indirect_and_inhe_0CC47": "A partner security administrator has the following role assignments:", "step.step_direct_indirect_and_inhe_073CB": "A direct assignment of Identity and Access Management (IAM) Administrator for the Solution Provider organization.", "step.step_direct_indirect_and_inhe_0D55F": "Membership in the Healthcare Team security group, which has indirect assignments of Exposure Management: Editing and Vulnerability Management: Editing for the Healthcare Service Partner organization. These reach companies in the healthcare segment through inheritance.", "step.step_direct_indirect_and_inhe_08CE8": "Membership in the Executives security group, which has an indirect assignment of Elements Reading All at the Solution Provider level. This assignment is inherited downward into all Service Partners and companies.", "content.p_direct_indirect_and_inhe_03E34": "The administrator's effective permissions combine all three sources. These are IAM administration at the Solution Provider, full editing in the healthcare segment, and read-only access across the entire estate.", "desc": [ "content.p_direct_indirect_and_inhe_0E9B7", "content.title_direct_indirect_and_inhe_0B3E5", "content.p_direct_indirect_and_inhe_01C5B", "content.p_direct_indirect_and_inhe_0B6D0", "content.note_direct_indirect_and_inhe_091F2", "content.title_direct_indirect_and_inhe_00269", "content.p_direct_indirect_and_inhe_0C803", "content.p_direct_indirect_and_inhe_02262", "content.p_direct_indirect_and_inhe_0584B", "content.title_direct_indirect_and_inhe_09EFC", "content.p_direct_indirect_and_inhe_06CD3", "content.p_direct_indirect_and_inhe_0393B", "content.p_direct_indirect_and_inhe_0944B", "content.title_direct_indirect_and_inhe_0BA33", "content.p_direct_indirect_and_inhe_0E411", "content.title_direct_indirect_and_inhe_0ED56", "content.p_direct_indirect_and_inhe_0CC47", { "steps.ul_direct_indirect_and_inhe_0C56A": [ "step.step_direct_indirect_and_inhe_073CB", "step.step_direct_indirect_and_inhe_0D55F", "step.step_direct_indirect_and_inhe_08CE8" ] }, "content.p_direct_indirect_and_inhe_03E34" ] }, "effective_permissions-latest-en.json": { "title": "title_effective_permissions_0000F39D", "title_effective_permissions_0000F39D": "Effective permissions", "shortdesc": "shortdesc_effective_permissions_0000D75C", "shortdesc_effective_permissions_0000D75C": "A security administrator's effective permissions in an organization are the combined set of permissions granted to that administrator. They include every role assignment that reaches the administrator and applies to that organization.", "content.p_effective_permissions_00002BC3": "Permissions in Elements RBAC are additive: every role assignment only grants permissions, never denies them. There are no exclusion rules, and no role can revoke permissions granted by another role. A security administrator's effective permissions are the union of all permissions reaching the administrator through any role assignment.", "content.p_effective_permissions_0000F550": "Three sources contribute to the effective permissions:", "step.step_effective_permissions_00003C73": "Direct role assignments made to the security administrator.", "step.step_effective_permissions_00002DF5": "Indirect role assignments made to security groups the administrator is a member of.", "step.step_effective_permissions_00000759": "Inherited role assignments created at a parent organization that apply to the organization being checked through downward inheritance.", "content.p_effective_permissions_0000EFC0": "Each source contributes independently, and the contributions accumulate. Having the same role through more than one source has no additional effect.", "content.p_effective_permissions_0000E369": "Effective permissions are organization-specific. A security administrator can have one set of effective permissions in one organization and a different set in another. The difference depends on which assignments apply to each organization.", "content.p_effective_permissions_0000BAA8": "To inspect the effective permissions of a specific security administrator in a specific organization, use the Check Access feature in the role assignments view.", "desc": [ "content.p_effective_permissions_00002BC3", "content.p_effective_permissions_0000F550", { "steps.ul_effective_permissions_00007BD0": [ "step.step_effective_permissions_00003C73", "step.step_effective_permissions_00002DF5", "step.step_effective_permissions_00000759" ] }, "content.p_effective_permissions_0000EFC0", "content.p_effective_permissions_0000E369", "content.p_effective_permissions_0000BAA8" ] }, "access_without_membership-latest-en.json": { "title": "title_access_without_membershi_099EA", "title_access_without_membershi_099EA": "Access without membership", "shortdesc": "shortdesc_access_without_membershi_06015", "shortdesc_access_without_membershi_06015": "Partner security administrators can have access to a customer company through role assignments alone, without being members of the company organization.", "content.p_access_without_membershi_0A484": "A security administrator gains access to an organization by having one or more role assignments that apply to that organization. The administrator does not need to be a member of the organization to receive the access.", "content.p_access_without_membershi_0AC1D": "This pattern is used for partner staff who manage customer companies. The partner security administrator belongs only to the Solution Provider organization. An Identity and Access Management (IAM) administrator assigns roles to the partner staff, with the customer company or a Service Partner as the resource. The mechanics are:", "step.step_access_without_membershi_0C285": "The partner security administrator is a member only of the Solution Provider organization.", "step.step_access_without_membershi_023B9": "An IAM administrator assigns roles to the partner staff, with a customer company or Service Partner as the resource.", "step.step_access_without_membershi_05465": "The partner staff can manage resources in the company through those role assignments.", "step.step_access_without_membershi_0224E": "The partner staff does not appear in the company's directory of security administrators.", "step.step_access_without_membershi_055EE": "The company's IAM administrator cannot see or manage the partner staff.", "content.p_access_without_membershi_0B60A": "The benefits of this pattern are:", "content.dt_access_without_membershi_0EF78": "Privacy", "content.dd_access_without_membershi_08EDB": "The partner's internal structure stays hidden from customers.", "content.dt_access_without_membershi_0AC68": "Security", "content.dd_access_without_membershi_0E1C0": "A company cannot accidentally remove a partner's access.", "content.dt_access_without_membershi_05E27": "Scalability", "content.dd_access_without_membershi_07E92": "The partner manages staff and their access centrally at the Solution Provider.", "content.note_access_without_membershi_077D6": "Note: Inherited access works the same way. When a role is assigned at the Solution Provider level, partner staff gain access to all managed companies through inheritance. They do not need to be members of any of them. Access without membership at the level of a single company is the more specific pattern. Use it when partner staff should have access to only some companies rather than all.", "content.note_access_without_membershi_0E64B": "Important: This is the recommended approach. Partner security administrators should not be members of customer company organizations. Access should be granted through role assignments alone.", "desc": [ "content.p_access_without_membershi_0A484", "content.p_access_without_membershi_0AC1D", { "steps.ul_access_without_membershi_06306": [ "step.step_access_without_membershi_0C285", "step.step_access_without_membershi_023B9", "step.step_access_without_membershi_05465", "step.step_access_without_membershi_0224E", "step.step_access_without_membershi_055EE" ] }, "content.p_access_without_membershi_0B60A", { "dl.dl_access_without_membershi_07AD8": [ { "dlentry.dlentry_access_without_membershi_08DB6": [ "content.dt_access_without_membershi_0EF78", "content.dd_access_without_membershi_08EDB" ] }, { "dlentry.dlentry_access_without_membershi_08314": [ "content.dt_access_without_membershi_0AC68", "content.dd_access_without_membershi_0E1C0" ] }, { "dlentry.dlentry_access_without_membershi_0BC65": [ "content.dt_access_without_membershi_05E27", "content.dd_access_without_membershi_07E92" ] } ] }, "content.note_access_without_membershi_077D6", "content.note_access_without_membershi_0E64B" ], "related": [ "user_types-latest-en" ] }, "planning_your_deployment-latest-en.json": { "title": "title_planning_your_deployment_089F3", "title_planning_your_deployment_089F3": "Planning your deployment", "shortdesc": "shortdesc_planning_your_deployment_0FD66", "shortdesc_planning_your_deployment_0FD66": "Before you turn on RBAC, plan your organizational structure, security groups, and role assignments based on how your security operations are organized.", "content.p_planning_your_deployment_0564F": "Plan your deployment with the guidance for partners and for companies and the best practices for organizations, security groups, and role assignments. The decisions you make while planning shape the structure you create when you set up your environment.", "desc": [ "content.p_planning_your_deployment_0564F" ], "related": [ "limitations-latest-en" ] }, "planning_your_deployment_as_a_partner-latest-en.json": { "title": "title_planning_your_deployment_0A3C1", "title_planning_your_deployment_0A3C1": "Planning your deployment as a partner", "shortdesc": "shortdesc_planning_your_deployment_019CD", "shortdesc_planning_your_deployment_019CD": "Before turning on RBAC as a partner, plan the organizational hierarchy, identify the security groups you need, and decide whether to integrate with Microsoft Entra ID.", "content.p_planning_your_deployment_0B8DD": "Partner deployments scale to hundreds of customer Companies, so planning before turning on RBAC saves significant effort later. Four decisions shape the deployment.", "content.title_planning_your_deployment_0A218": "Decide how to group customer Companies", "content.p_planning_your_deployment_0E922": "Consider whether your customer Companies fall into natural groupings:", "step.step_planning_your_deployment_0D7D8": "Do different teams manage different customer segments?", "step.step_planning_your_deployment_094D0": "Are there industry-specific requirements that call for separation (for example, Healthcare, Legal, or Finance)?", "step.step_planning_your_deployment_0FC0E": "Do you offer different service tiers that need segregated access?", "content.p_planning_your_deployment_054F6": "Even if a single team manages all Companies with a consistent access model, or if you have fewer than 10-20 customer Companies, create at least one Service Partner and place all Companies under it rather than skipping the layer entirely. This preserves the ability to scope sensitive roles, such as IAM Administrator, API Key Management, and Audit Log access, to Companies only, without granting them across the whole partner organization.", "content.p_planning_your_deployment_0C818": "If distinct groupings are also useful (by team, industry, service tier, or geography), plan to use multiple Service Partners instead of a single Service Partner. For example:", "content.title_planning_your_deployment_04643": "Plan the security groups you will need", "content.p_planning_your_deployment_0397D": "Identify the job functions in the managed organization (for example, SOC analysts, security engineers, managers, and executives). Map the required permissions to each function and plan a naming convention for the security groups, such as Elements-SOC-Team or Elements-Admins.", "content.p_planning_your_deployment_07CEB": "Security groups are the recommended way to manage access at scale and let permission changes apply to all members instantly.", "content.title_planning_your_deployment_0025B": "Decide whether to integrate with Microsoft Entra ID", "content.p_planning_your_deployment_0CD74": "Entra ID integration is strongly recommended for partners that have:", "step.step_planning_your_deployment_0E495": "An existing Microsoft Entra ID infrastructure.", "step.step_planning_your_deployment_04D0B": "A portfolio of integrated IT management systems.", "step.step_planning_your_deployment_0D09C": "A requirement for automated user lifecycle management.", "step.step_planning_your_deployment_05F29": "Compliance requirements that benefit from centralized identity governance.", "content.p_planning_your_deployment_05388": "Full Entra integration uses both SSO Federation (authentication) and System for Cross-domain Identity Management (SCIM) provisioning (user and group synchronization). Together, they remove the need for day-to-day access management in the Elements portal. Security administrators and group memberships are managed entirely in Entra ID.", "content.title_planning_your_deployment_05E49": "Prepare a deployment checklist", "content.p_planning_your_deployment_0CE52": "Before turning on RBAC, work through the following items:", "step.step_planning_your_deployment_0A1A3": "Document the organizational hierarchy: which Companies belong under which Service Partners.", "step.step_planning_your_deployment_090CC": "Identify all security administrator roles and the permissions they need.", "step.step_planning_your_deployment_03324": "Plan the security groups and their role assignments.", "step.step_planning_your_deployment_0C7F8": "If you plan to integrate with Entra ID, prepare the Entra tenant and create the Entra security groups with the chosen naming convention.", "step.step_planning_your_deployment_0525D": "Configure the filters that determine which Entra users and groups will be provisioned.", "content.title_planning_your_deployment_0B7C4": "Next steps", "content.p_planning_your_deployment_0FB37": "When the planning decisions are complete, follow the quick start to carry them out.", "desc": [ "content.p_planning_your_deployment_0B8DD", "content.title_planning_your_deployment_0A218", "content.p_planning_your_deployment_0E922", { "steps.ul_planning_your_deployment_071AF": [ "step.step_planning_your_deployment_0D7D8", "step.step_planning_your_deployment_094D0", "step.step_planning_your_deployment_0FC0E" ] }, "content.p_planning_your_deployment_054F6", "content.p_planning_your_deployment_0C818", "content.title_planning_your_deployment_04643", "content.p_planning_your_deployment_0397D", "content.p_planning_your_deployment_07CEB", "content.title_planning_your_deployment_0025B", "content.p_planning_your_deployment_0CD74", { "steps.ul_planning_your_deployment_03254": [ "step.step_planning_your_deployment_0E495", "step.step_planning_your_deployment_04D0B", "step.step_planning_your_deployment_0D09C", "step.step_planning_your_deployment_05F29" ] }, "content.p_planning_your_deployment_05388", "content.title_planning_your_deployment_05E49", "content.p_planning_your_deployment_0CE52", { "steps.ul_planning_your_deployment_08E0F": [ "step.step_planning_your_deployment_0A1A3", "step.step_planning_your_deployment_090CC", "step.step_planning_your_deployment_03324", "step.step_planning_your_deployment_0C7F8", "step.step_planning_your_deployment_0525D" ] }, "content.title_planning_your_deployment_0B7C4", "content.p_planning_your_deployment_0FB37" ], "related": [ "microsoft_entra_id_integration-latest-en", "best_practices_for_organizations-latest-en" ] }, "planning_your_deployment_as_a_company-latest-en.json": { "title": "title_planning_your_deployment_040AC", "title_planning_your_deployment_040AC": "Planning your deployment as a company", "shortdesc": "shortdesc_planning_your_deployment_0CEEE", "shortdesc_planning_your_deployment_0CEEE": "Before turning on RBAC for a Company, identify the size and structure of the security team, decide whether to integrate with Microsoft Entra ID, and plan the security groups you will need.", "content.p_planning_your_deployment_0DDA8": "Company deployments are simpler than partner deployments. A Company has no hierarchy, no Scope Selector switching, and no inheritance to plan for. Three decisions shape the deployment.", "content.title_planning_your_deployment_07B5C": "Identify the security team and the required access", "content.p_planning_your_deployment_04908": "Consider the structure of the team that will use Elements:", "step.step_planning_your_deployment_020F1": "How many security administrators need access to Elements?", "step.step_planning_your_deployment_0BD07": "What are their job functions, and what permissions does each function need?", "step.step_planning_your_deployment_01E65": "Do you want to manage identities in Microsoft Entra ID, or directly in Elements?", "content.title_planning_your_deployment_05D8B": "Choose an access management approach", "content.p_planning_your_deployment_08ED5": "Elements supports two ways for a Company to manage security administrators and security groups:", "content.dt_planning_your_deployment_026C1": "Entra ID integration", "content.p_planning_your_deployment_0BBCB": "Security administrators and security groups are managed in Microsoft Entra ID and synchronized automatically to Elements. SSO Federation handles authentication, and System for Cross-domain Identity Management (SCIM) provisioning handles user and group synchronization.
", "content.p_planning_your_deployment_04F60": "Recommended for organizations with more than five users, or when compliance requirements call for centralized identity governance. Requires an Entra ID tenant.", "content.dt_planning_your_deployment_02C15": "Local management", "content.p_planning_your_deployment_022C5": "Security administrators and security groups are created and maintained directly in Elements. Invitations are issued manually, and security administrators authenticate with Elements credentials and multi-factor authentication.
", "content.p_planning_your_deployment_0D408": "Suitable for small teams without Microsoft 365, for guest or contractor accounts, or as a starting point for organizations that intend to add Entra ID integration later.", "content.title_planning_your_deployment_0A909": "Plan the security groups you will need", "content.p_planning_your_deployment_05A00": "A common starting point for a Company is three security groups:", "content.dt_planning_your_deployment_07BA7": "Administrators", "content.dd_planning_your_deployment_0DCDE": "Full access, typically with the Elements Editing All role.", "content.dt_planning_your_deployment_0FD48": "Security team", "content.dd_planning_your_deployment_0B651": "Monitoring and response, with feature-specific roles such as Endpoint Protection, Exposure Management, and Response.", "content.dt_planning_your_deployment_0B6F8": "Read-only users", "content.dd_planning_your_deployment_01B18": "Dashboards and reports, typically with the Elements Reading All role.", "content.p_planning_your_deployment_0C297": "Adjust the set to match the team's structure.", "content.title_planning_your_deployment_046CA": "Prepare a deployment checklist", "content.p_planning_your_deployment_0275F": "Before turning on RBAC, work through the following items:", "step.step_planning_your_deployment_0CF6C": "Decide whether to integrate with Entra ID or to manage access locally.", "step.step_planning_your_deployment_0F20D": "If you plan to integrate with Entra ID, prepare the Entra security groups in advance.", "step.step_planning_your_deployment_0D8DD": "Identify the first administrator who will be assigned the Elements Editing All role.", "step.step_planning_your_deployment_036A1": "Define the security groups based on job functions.", "step.step_planning_your_deployment_04DAD": "List all security administrators who will need access.", "step.step_planning_your_deployment_03742": "Map the role assignments each security group will need.", "content.title_planning_your_deployment_0177A": "Next steps", "content.p_planning_your_deployment_06DC0": "When the planning decisions are complete, follow the quick start to carry them out.", "desc": [ "content.p_planning_your_deployment_0DDA8", "content.title_planning_your_deployment_07B5C", "content.p_planning_your_deployment_04908", { "steps.ul_planning_your_deployment_08F97": [ "step.step_planning_your_deployment_020F1", "step.step_planning_your_deployment_0BD07", "step.step_planning_your_deployment_01E65" ] }, "content.title_planning_your_deployment_05D8B", "content.p_planning_your_deployment_08ED5", { "dl.dl_planning_your_deployment_0F99B": [ { "dlentry.dlentry_planning_your_deployment_098A4": [ "content.dt_planning_your_deployment_026C1", "content.p_planning_your_deployment_0BBCB", "content.p_planning_your_deployment_04F60" ] }, { "dlentry.dlentry_planning_your_deployment_0C145": [ "content.dt_planning_your_deployment_02C15", "content.p_planning_your_deployment_022C5", "content.p_planning_your_deployment_0D408" ] } ] }, "content.title_planning_your_deployment_0A909", "content.p_planning_your_deployment_05A00", { "dl.dl_planning_your_deployment_09D73": [ { "dlentry.dlentry_planning_your_deployment_0FF68": [ "content.dt_planning_your_deployment_07BA7", "content.dd_planning_your_deployment_0DCDE" ] }, { "dlentry.dlentry_planning_your_deployment_06709": [ "content.dt_planning_your_deployment_0FD48", "content.dd_planning_your_deployment_0B651" ] }, { "dlentry.dlentry_planning_your_deployment_09297": [ "content.dt_planning_your_deployment_0B6F8", "content.dd_planning_your_deployment_01B18" ] } ] }, "content.p_planning_your_deployment_0C297", "content.title_planning_your_deployment_046CA", "content.p_planning_your_deployment_0275F", { "steps.ul_planning_your_deployment_02567": [ "step.step_planning_your_deployment_0CF6C", "step.step_planning_your_deployment_0F20D", "step.step_planning_your_deployment_0D8DD", "step.step_planning_your_deployment_036A1", "step.step_planning_your_deployment_04DAD", "step.step_planning_your_deployment_03742" ] }, "content.title_planning_your_deployment_0177A", "content.p_planning_your_deployment_06DC0" ], "related": [ "microsoft_entra_id_integration-latest-en", "best_practices_for_security_groups-latest-en" ] }, "best_practices-latest-en.json": { "title": "title_best_practices_000001_F8827DA4", "title_best_practices_000001_F8827DA4": "Best practices for Elements RBAC", "shortdesc": "shortdesc_best_practices_000002_000F3DC4", "shortdesc_best_practices_000002_000F3DC4": "Apply these recommendations to keep your RBAC deployment maintainable as your environment grows.", "content.p_best_practices_00000D_8E143868": "These best practices cover organizations, security groups, and role assignments. Review them as part of your initial planning, and again whenever your security team or customer portfolio changes.", "desc": [ "content.p_best_practices_00000D_8E143868" ] }, "best_practices_for_organizations-latest-en.json": { "title": "title_best_practices_for_organ_0B160", "title_best_practices_for_organ_0B160": "Best practices for organizations", "shortdesc": "shortdesc_best_practices_for_organ_0AACC", "shortdesc_best_practices_for_organ_0AACC": "Plan the organizational hierarchy thoughtfully, use at least one Service Partner in every deployment (grouping all Companies under it if no further segmentation is needed), and keep partner security administrators at the Solution Provider level.", "content.p_best_practices_for_organ_049E9": "The organizational hierarchy is the backbone of Elements RBAC. Decisions about hierarchy structure affect daily operations, role assignment efficiency, and the security of customer Companies. The following practices help partners and Companies set up an organizational structure that scales:", "content.dt_best_practices_for_organ_02CD3": "Plan the hierarchy before enabling RBAC", "content.dd_best_practices_for_organ_03C7C": "Decide before deployment whether to use Service Partners and, if so, how Companies will be grouped. Common groupings are by managing team, by industry, by service tier, or by geography. Document the planned structure so team members understand where each Company belongs and why.", "content.dt_best_practices_for_organ_0897D": "Use at least one Service Partner in every deployment", "content.dd_best_practices_for_organ_0446E": "", "content.dd_p_best_practices_for_organ_0DCF2": "Service Partners are the only level at which sensitive roles, such as IAM Administrator, API Key Management, and Audit Log access, can be scoped to Companies rather than the entire partner organization, so every partner should create at least one, regardless of size. Use multiple Service Partners when:
", "choice.choice_best_practices_for_organ_0565E": "Different teams manage different Companies and require segregated access.", "choice.choice_best_practices_for_organ_0828F": "Industry-specific or compliance requirements (for example, Healthcare or Legal) call for separation.", "choice.choice_best_practices_for_organ_038DC": "Different service tiers require different access patterns.", "content.dd_p_best_practices_for_organ_045EB": "If a single team manages all Companies with a consistent access model, group all Companies under one Service Partner rather than placing them directly under the Solution Provider.
", "content.dt_best_practices_for_organ_04FB8": "Keep partner security administrators at the Solution Provider level", "content.dd_best_practices_for_organ_0F0A8": "Partner security administrators should belong only to the Solution Provider organization. Grant them access to managed Companies through role assignments rather than through membership in those Companies. This keeps the partner's internal structure invisible to Company Identity and Access Management (IAM) administrators and simplifies administration on the partner side.", "content.dt_best_practices_for_organ_0E088": "Avoid Service Partner delegation unless necessary", "content.dd_best_practices_for_organ_06AF3": "Adding IAM administrators at the Service Partner level is technically possible but is not recommended for most partners. It creates additional administrative complexity and gives the delegated administrators visibility only to that Service Partner and the Companies under it. The simpler pattern is to keep partner IAM administrators at the Solution Provider level and use security groups to segregate access across Service Partners.", "content.dt_best_practices_for_organ_0E370": "Assign roles at the highest level that matches the desired scope", "content.dd_best_practices_for_organ_00D1E": "Inheritance flows downward through the hierarchy, so a role assigned at a parent organization applies to all organizations below it. Use this property to keep the number of role assignments small: assign at the Solution Provider for partner-wide access, at a Service Partner for segment-wide access, and at a Company only for Company-specific exceptions.", "content.dt_best_practices_for_organ_0E219": "Enable RBAC one organization at a time when migrating", "content.dd_best_practices_for_organ_0CD5A": "RBAC enablement is per-organization. Use this property to migrate gradually: enable RBAC in the Solution Provider first, then in selected Companies, while leaving other Companies on the previous access model until you are ready. A phased migration reduces operational risk during transition.", "desc": [ "content.p_best_practices_for_organ_049E9", { "dl.dl_best_practices_for_organ_0ED54": [ { "dlentry.dlentry_best_practices_for_organ_0611D": [ "content.dt_best_practices_for_organ_02CD3", "content.dd_best_practices_for_organ_03C7C" ] }, { "dlentry.dlentry_best_practices_for_organ_0D77D": [ "content.dt_best_practices_for_organ_0897D", "content.dd_best_practices_for_organ_0446E", "content.dd_p_best_practices_for_organ_0DCF2", { "choices.ul_best_practices_for_organ_0234F": [ "choice.choice_best_practices_for_organ_0565E", "choice.choice_best_practices_for_organ_0828F", "choice.choice_best_practices_for_organ_038DC" ] }, "content.dd_p_best_practices_for_organ_045EB" ] }, { "dlentry.dlentry_best_practices_for_organ_08078": [ "content.dt_best_practices_for_organ_04FB8", "content.dd_best_practices_for_organ_0F0A8" ] }, { "dlentry.dlentry_best_practices_for_organ_05911": [ "content.dt_best_practices_for_organ_0E088", "content.dd_best_practices_for_organ_06AF3" ] }, { "dlentry.dlentry_best_practices_for_organ_091DC": [ "content.dt_best_practices_for_organ_0E370", "content.dd_best_practices_for_organ_00D1E" ] }, { "dlentry.dlentry_best_practices_for_organ_00886": [ "content.dt_best_practices_for_organ_0E219", "content.dd_best_practices_for_organ_0CD5A" ] } ] } ], "related": [ "using_inheritance_effectively-latest-en" ] }, "best_practices_for_security_groups-latest-en.json": { "title": "title_best_practices_for_secur_04DDD", "title_best_practices_for_secur_04DDD": "Best practices for security groups", "shortdesc": "shortdesc_best_practices_for_secur_073B3", "shortdesc_best_practices_for_secur_073B3": "These recommendations cover how to organize security groups, how to use them for permission management, and how to maintain them over time.", "content.title_best_practices_for_secur_0724B": "For partners", "step.step_best_practices_for_secur_0E527": "Create security groups at the Solution Provider level, which is the top-level partner organization.", "step.step_best_practices_for_secur_0BDF2": "Use groups to segregate teams by function, for example \"SOC Team\", \"Engineers\", or \"Executives\".", "step.step_best_practices_for_secur_06882": "Use groups, and assign their roles to Service Partner suborganizations to segregate access by customer segment, for example \"Healthcare Team\" or \"Legal Team\".", "step.step_best_practices_for_secur_07530": "Assign roles at the appropriate organizational level: the Solution Provider for broad access, a Service Partner for segment-specific access, and a company for exceptions.", "content.title_best_practices_for_secur_018EC": "For companies", "step.step_best_practices_for_secur_07FC4": "Create security groups within the company organization.", "step.step_best_practices_for_secur_0A155": "Organize groups by department or role, for example \"IT Security\", \"Administrators\", or \"Read-Only Users\".", "step.step_best_practices_for_secur_03A39": "Assign roles to the groups.", "content.title_best_practices_for_secur_0C524": "Permission management", "step.step_best_practices_for_secur_03725": "Prefer indirect role assignments through security groups over direct role assignments to individual security administrators.", "step.step_best_practices_for_secur_059CF": "Use security groups as permission templates.", "step.step_best_practices_for_secur_0BC9E": "One security group can have role assignments to multiple organizations.", "step.step_best_practices_for_secur_021BA": "Security administrators inherit all role assignments from all groups they belong to.", "content.title_best_practices_for_secur_06B23": "Maintenance", "step.step_best_practices_for_secur_07DBC": "Regularly review security group membership.", "step.step_best_practices_for_secur_0D50D": "Audit role assignments for each group.", "step.step_best_practices_for_secur_0CF2F": "Remove obsolete groups.", "step.step_best_practices_for_secur_06DE5": "Document the purpose of each security group.", "desc": [ "content.title_best_practices_for_secur_0724B", { "steps.ul_best_practices_for_secur_0C425": [ "step.step_best_practices_for_secur_0E527", "step.step_best_practices_for_secur_0BDF2", "step.step_best_practices_for_secur_06882", "step.step_best_practices_for_secur_07530" ] }, "content.title_best_practices_for_secur_018EC", { "steps.ul_best_practices_for_secur_000BD": [ "step.step_best_practices_for_secur_07FC4", "step.step_best_practices_for_secur_0A155", "step.step_best_practices_for_secur_03A39" ] }, "content.title_best_practices_for_secur_0C524", { "steps.ul_best_practices_for_secur_063C7": [ "step.step_best_practices_for_secur_03725", "step.step_best_practices_for_secur_059CF", "step.step_best_practices_for_secur_0BC9E", "step.step_best_practices_for_secur_021BA" ] }, "content.title_best_practices_for_secur_06B23", { "steps.ul_best_practices_for_secur_03AC7": [ "step.step_best_practices_for_secur_07DBC", "step.step_best_practices_for_secur_0D50D", "step.step_best_practices_for_secur_0CF2F", "step.step_best_practices_for_secur_06DE5" ] } ] }, "best_practices_for_role_assignments-latest-en.json": { "title": "title_best_practices_for_role__05054", "title_best_practices_for_role__05054": "Best practices for role assignments", "shortdesc": "shortdesc_best_practices_for_role__06E07", "shortdesc_best_practices_for_role__06E07": "These recommendations keep role assignments scalable, maintainable, and auditable as the number of organizations and security administrators grows.", "content.title_best_practices_for_role__0A7D3": "Recommended practices", "content.dt_best_practices_for_role__0529F": "Prefer security groups over direct user assignments", "content.p_best_practices_for_role__0ACF7": "Create security groups that represent permission profiles, assign roles to the groups rather than to individual security administrators, and add administrators to the appropriate groups. The root user account is the exception. It keeps a direct Elements Editing All assignment as a fallback for recovery.
", "content.p_best_practices_for_role__04206": "Group-based assignments also help stay within the per-tenant role assignment limit, because a single assignment on a group serves all of its members. Avoid creating redundant assignments. Granting the same role to the same subject for the same organization more than once has no additional effect.", "content.dt_best_practices_for_role__0E996": "Use inheritance for efficiency", "content.dd_best_practices_for_role__0C1E7": "When access should apply to multiple child organizations, assign the role at the parent organization and let inheritance carry it downward. This reduces the total number of role assignments, simplifies management, and means that new child organizations automatically inherit access without further configuration.", "content.dt_best_practices_for_role__0BD61": "Use the narrowest appropriate scope", "content.dd_best_practices_for_role__00EFD": "Do not assign a broader scope than the access requires. A team that should only access healthcare companies should have its role assigned at the Healthcare Service Partner organization, not at the Solution Provider. Access intended for a single company should be assigned at that company, not at a parent.", "content.dt_best_practices_for_role__085E9": "Document the purpose of each security group", "content.dd_best_practices_for_role__071A7": "Use clear, descriptive names for security groups and keep an inventory of what each group is intended for. Documentation makes audits easier, prevents accidental misuse of broad groups, and helps onboard new Identity and Access Management (IAM) administrators.", "content.title_best_practices_for_role__0A942": "Permission design patterns", "content.p_best_practices_for_role__0DA08": "Four common patterns combine the practices above into a coherent design:", "content.dt_best_practices_for_role__0AEE8": "Role-based groups", "content.dd_best_practices_for_role__047D4": "Create security groups by job function (for example, Administrators, SOC Team, or Read-only users). Assign roles appropriate to each function and add administrators based on their role.", "content.dt_best_practices_for_role__0C464": "Team-based groups", "content.dd_best_practices_for_role__0BECE": "Create security groups by customer segment (for example, Healthcare Team, Legal Team, or Financial Team). Assign roles scoped to the appropriate Service Partner and add administrators based on their team assignment.", "content.dt_best_practices_for_role__048AD": "Hybrid groups", "content.dd_best_practices_for_role__0323D": "Combine function-based and team-based groups. Use function groups at the Solution Provider for broad cross-segment access, and use team groups at the Service Partner level for segment-specific access.", "content.dt_best_practices_for_role__00C08": "Entra-driven", "content.dd_best_practices_for_role__06511": "Provision security groups from Microsoft Entra ID, assign roles to the provisioned groups in Elements, and manage all membership in Entra ID. This pattern is recommended for organizations already using Microsoft 365 and requires no day-to-day operations in the Elements portal.", "desc": [ "content.title_best_practices_for_role__0A7D3", { "dl.dl_best_practices_for_role__0665A": [ { "dlentry.dlentry_best_practices_for_role__0ECF9": [ "content.dt_best_practices_for_role__0529F", "content.p_best_practices_for_role__0ACF7", "content.p_best_practices_for_role__04206" ] }, { "dlentry.dlentry_best_practices_for_role__06476": [ "content.dt_best_practices_for_role__0E996", "content.dd_best_practices_for_role__0C1E7" ] }, { "dlentry.dlentry_best_practices_for_role__0958A": [ "content.dt_best_practices_for_role__0BD61", "content.dd_best_practices_for_role__00EFD" ] }, { "dlentry.dlentry_best_practices_for_role__080B6": [ "content.dt_best_practices_for_role__085E9", "content.dd_best_practices_for_role__071A7" ] } ] }, "content.title_best_practices_for_role__0A942", "content.p_best_practices_for_role__0DA08", { "dl.dl_best_practices_for_role__00160": [ { "dlentry.dlentry_best_practices_for_role__0497D": [ "content.dt_best_practices_for_role__0AEE8", "content.dd_best_practices_for_role__047D4" ] }, { "dlentry.dlentry_best_practices_for_role__02523": [ "content.dt_best_practices_for_role__0C464", "content.dd_best_practices_for_role__0BECE" ] }, { "dlentry.dlentry_best_practices_for_role__0AC9A": [ "content.dt_best_practices_for_role__048AD", "content.dd_best_practices_for_role__0323D" ] }, { "dlentry.dlentry_best_practices_for_role__0C489": [ "content.dt_best_practices_for_role__00C08", "content.dd_best_practices_for_role__06511" ] } ] } ] }, "getting_started-latest-en.json": { "title": "title_getting_started_000001_E055CBB", "title_getting_started_000001_E055CBB": "Getting started", "shortdesc": "shortdesc_getting_started_000002_9ED4F32", "shortdesc_getting_started_000002_9ED4F32": "Turn on RBAC for the managed organization, then follow the quick start that matches your deployment.", "content.p_getting_started_00000F_F0B74E8": "Two quick starts are available: one for partner deployments and one for Company deployments. Each lists the tasks in order with links to the detailed procedures. Complete the deployment planning before you start, then follow the quick start that matches your environment.", "desc": [ "content.p_getting_started_00000F_F0B74E8" ] }, "enabling_rbac-latest-en.json": { "title": "title_turning_on_rbac_for_orga_02756", "title_turning_on_rbac_for_orga_02756": "Turn on RBAC for an organization", "shortdesc": "shortdesc_turning_on_rbac_for_orga_0D480", "shortdesc_turning_on_rbac_for_orga_0D480": "Turn on RBAC for the managed organization to start managing access through security groups and role assignments.", "content.p_turning_on_rbac_for_orga_082B4": "Before you start, make sure you have the Identity and Access Management (IAM) Administrator role or the Elements Editing All role in the organization.", "content.p_turning_on_rbac_for_orga_008A6": "RBAC must be turned on separately for each organization. Turning on RBAC in a parent organization does not automatically turn it on in managed organizations.", "content.note_turning_on_rbac_for_orga_05ADD": "Important: If you are a partner and you turn on RBAC in a managed Company, this also affects the IAM administrators of that Company.", "step.step_turning_on_rbac_for_orga_0CA6E": "Select the organization in the Scope Selector.", "content.p_turning_on_rbac_for_orga_020AD": "", "content.p_turning_on_rbac_for_orga_0C5B6": "The RBAC welcome screen appears.", "step.step_turning_on_rbac_for_orga_02643": "Go to Management > Access Control.", "step.step_turning_on_rbac_for_orga_0BC87": "Review the information about what turning on RBAC means.", "step.step_turning_on_rbac_for_orga_04FB5": "Click Turn Role-Based Access Control on.", "content.p_turning_on_rbac_for_orga_0BA7B": "RBAC is now turned on for this organization:", "step.step_turning_on_rbac_for_orga_0F8BD": "The Access Control pages become available for managing security groups, role assignments, and security administrators.", "step.step_turning_on_rbac_for_orga_0F703": "The previous direct access model converts to the new RBAC model.", "step.step_turning_on_rbac_for_orga_064C4": "Existing security administrators become explicit members of their organizations.", "step.step_turning_on_rbac_for_orga_0D1DF": "Existing permissions convert to direct role assignments.", "step.step_turning_on_rbac_for_orga_0F826": "All existing access is preserved.", "content.note_turning_on_rbac_for_orga_0F92D": "Note: After you turn on RBAC, the Organization Settings > Security Administrators page changes to show Entra ID configuration only (SSO Federation and System for Cross-domain Identity Management (SCIM) provisioning). Security administrator management moves to Access Control > Security Administrators.", "content.note_turning_on_rbac_for_orga_033EF": "Note: To revert to the previous access model, use the link on the Organization Settings > Security Administrators page. You can revert only after removing all security groups and removing all access that does not depend on organization membership. Features specific to RBAC are not available in the previous access model.", "desc": [ "content.p_turning_on_rbac_for_orga_082B4", "content.p_turning_on_rbac_for_orga_008A6", "content.note_turning_on_rbac_for_orga_05ADD", { "steps.steps_turning_on_rbac_for_orga_04EC9": [ "step.step_turning_on_rbac_for_orga_0CA6E", "step.step_turning_on_rbac_for_orga_02643", "content.p_turning_on_rbac_for_orga_020AD", "content.p_turning_on_rbac_for_orga_0C5B6", "step.step_turning_on_rbac_for_orga_0BC87", "step.step_turning_on_rbac_for_orga_04FB5" ] }, "content.p_turning_on_rbac_for_orga_0BA7B", { "steps.ul_turning_on_rbac_for_orga_06F2F": [ "step.step_turning_on_rbac_for_orga_0F8BD", "step.step_turning_on_rbac_for_orga_0F703", "step.step_turning_on_rbac_for_orga_064C4", "step.step_turning_on_rbac_for_orga_0D1DF", "step.step_turning_on_rbac_for_orga_0F826" ] }, "content.note_turning_on_rbac_for_orga_0F92D", "content.note_turning_on_rbac_for_orga_033EF" ] }, "quick_start_for_partners-latest-en.json": { "title": "title_quick_start_for_partners_059CB", "title_quick_start_for_partners_059CB": "Set up Elements RBAC for partners", "shortdesc": "shortdesc_quick_start_for_partners_09653", "shortdesc_quick_start_for_partners_09653": "Set up Elements RBAC for a partner organization that manages multiple Companies and is planning Microsoft Entra ID integration.", "content.p_quick_start_for_partners_0F9EE": "This quick start is intended for a partner that manages 20 or more Companies and plans to integrate with Microsoft Entra ID. Complete the planning before you start.", "step.step_quick_start_for_partners_0A663": "Turn on RBAC in the Solution Provider organization.", "step.step_quick_start_for_partners_0A10E": "If you decided to use Service Partners, create them and move Companies under them.", "step.step_quick_start_for_partners_0D374": "Set up SSO Federation for Microsoft Entra ID integration.", "step.step_quick_start_for_partners_0BF82": "Configure System for Cross-domain Identity Management (SCIM) provisioning.", "step.step_quick_start_for_partners_0CBC6": "Apply filters so that only the Entra security groups you intend to use are synchronized.", "subchoice.choice_quick_start_for_partners_03147": "Elements-Admins for full access to all Companies.", "subchoice.choice_quick_start_for_partners_08D01": "Elements-SOC for monitoring access to all Companies.", "subchoice.choice_quick_start_for_partners_09A9A": "Elements-Healthcare for full access to a Healthcare Service Partner.", "subchoice.choice_quick_start_for_partners_09B18": "Elements-Legal for full access to a Legal Service Partner.", "content.p_quick_start_for_partners_089F3": "Example groups:", "step.step_quick_start_for_partners_0D2B5": "Define the security groups in Entra ID using the naming convention you chose during planning.", "content.p_quick_start_for_partners_005B8": "Assign at the Solution Provider for partner-wide access, and at a Service Partner for segment-specific access.", "step.step_quick_start_for_partners_00925": "Assign roles to each Entra-provisioned security group at the appropriate organizational level.", "content.p_quick_start_for_partners_0CF30": "Membership changes synchronize to Elements automatically.", "step.step_quick_start_for_partners_0DF57": "Add partner security administrators to the Entra ID security groups.", "content.p_quick_start_for_partners_0993B": "Assign the Elements Editing All role to the first administrator. The administrator receives an invitation email.", "step.step_quick_start_for_partners_06D0F": "Create the first administrator for each Company.", "content.p_quick_start_for_partners_0787E": "The partner organization now has automated access management, segregated team access through Entra-provisioned groups, and an established administrator in each Company. As ongoing activities, monitor the provisioning sync, train the Company administrators, and review access periodically.", "desc": [ "content.p_quick_start_for_partners_0F9EE", { "steps.steps_quick_start_for_partners_049A0": [ "step.step_quick_start_for_partners_0A663", "step.step_quick_start_for_partners_0A10E", "step.step_quick_start_for_partners_0D374", "step.step_quick_start_for_partners_0BF82", "step.step_quick_start_for_partners_0CBC6", "step.step_quick_start_for_partners_0D2B5", "content.p_quick_start_for_partners_089F3", { "subchoices.ul_quick_start_for_partners_06ED6": [ "subchoice.choice_quick_start_for_partners_03147", "subchoice.choice_quick_start_for_partners_08D01", "subchoice.choice_quick_start_for_partners_09A9A", "subchoice.choice_quick_start_for_partners_09B18" ] }, "step.step_quick_start_for_partners_00925", "content.p_quick_start_for_partners_005B8", "step.step_quick_start_for_partners_0DF57", "content.p_quick_start_for_partners_0CF30", "step.step_quick_start_for_partners_06D0F", "content.p_quick_start_for_partners_0993B" ] }, "content.p_quick_start_for_partners_0787E" ], "related": [ "planning_your_deployment_as_a_partner-latest-en", "creating_service_partners-latest-en", "moving_companies_under_service_provider-latest-en", "sso_federation_setup-latest-en", "scim_provisioning_configuration-latest-en", "filtering_which_users_and_groups_synchronize-latest-en", "assigning_roles_to_security_groups_member_first_approach-latest-en", "creating_the_first_company_administrator-latest-en", "enabling_rbac-latest-en" ] }, "quick_start_for_companies-latest-en.json": { "title": "title_quick_start_for_companie_001B3", "title_quick_start_for_companie_001B3": "Set up Elements RBAC for companies", "shortdesc": "shortdesc_quick_start_for_companie_09F1F", "shortdesc_quick_start_for_companie_09F1F": "Set up Elements RBAC for a Company organization of five to ten security administrators that does not integrate with Microsoft Entra ID.", "content.p_quick_start_for_companie_06F3D": "This quick start is intended for a Company with five to ten security administrators that does not yet integrate with Microsoft Entra ID. Complete the planning before you start.", "step.step_quick_start_for_companie_0327D": "Turn on RBAC for the Company organization.", "content.p_quick_start_for_companie_0EE3B": "Confirm access by checking that all menu items are available in Elements Security Center.", "step.step_quick_start_for_companie_0965A": "Verify that the first administrator has the Elements Editing All role.", "subchoice.choice_quick_start_for_companie_00562": "Administrators with the Elements Editing All role.", "subchoice.choice_quick_start_for_companie_09D76": "Security Team with Endpoint Protection, Exposure Management, Vulnerability Management, and Response roles.", "subchoice.choice_quick_start_for_companie_038C5": "View-Only with the Elements Reading All role.", "content.p_quick_start_for_companie_0D1D6": "Example groups:", "step.step_quick_start_for_companie_0CA3C": "Create the security groups identified during planning.", "content.p_quick_start_for_companie_06716": "Go to Access Control > Security Administrators, click Invite Security Administrator, enter the email, and select the security groups. Repeat for each security administrator.", "step.step_quick_start_for_companie_02FF9": "Invite security administrators and add them to the appropriate security groups.", "content.p_quick_start_for_companie_0CAA6": "Have each security administrator sign in and confirm they can use the functionality they need. Use the Check Access feature to verify their effective permissions.", "step.step_quick_start_for_companie_01287": "Verify access for each security administrator.", "content.p_quick_start_for_companie_09E82": "Company security administrators can sign in to Elements Security Center with permissions managed through security groups. As ongoing activities, consider integrating with Microsoft Entra ID for automated user management, refine the security groups as the team grows, and review permissions periodically.", "desc": [ "content.p_quick_start_for_companie_06F3D", { "steps.steps_quick_start_for_companie_00500": [ "step.step_quick_start_for_companie_0327D", "step.step_quick_start_for_companie_0965A", "content.p_quick_start_for_companie_0EE3B", "step.step_quick_start_for_companie_0CA3C", "content.p_quick_start_for_companie_0D1D6", { "subchoices.ul_quick_start_for_companie_0A7F6": [ "subchoice.choice_quick_start_for_companie_00562", "subchoice.choice_quick_start_for_companie_09D76", "subchoice.choice_quick_start_for_companie_038C5" ] }, "step.step_quick_start_for_companie_02FF9", "content.p_quick_start_for_companie_06716", "step.step_quick_start_for_companie_01287", "content.p_quick_start_for_companie_0CAA6" ] }, "content.p_quick_start_for_companie_09E82" ], "related": [ "planning_your_deployment_as_a_company-latest-en", "creating_security_groups-latest-en", "inviting_a_security_administrator_to_a_company_organization-latest-en", "checking_effective_roles_for_a_user-latest-en", "enabling_rbac-latest-en" ] }, "organizing_your_environment-latest-en.json": { "title": "title_organizing_your_environm_0A5B9", "title_organizing_your_environm_0A5B9": "Organizing your environment", "shortdesc": "shortdesc_organizing_your_environm_03BEB", "shortdesc_organizing_your_environm_03BEB": "Shape your Elements environment to match how you organize your security operations: create Service Partners, move companies between them, and control what partners can access.", "content.p_organizing_your_environm_04536": "Visibility and isolation between organizations determine what each partner can see. If you move an organization in the hierarchy, this changes that access. The related tasks explain how to create Service Partners, move companies, and restrict partner access.", "desc": [ "content.p_organizing_your_environm_04536" ] }, "visibility_and_isolation_between_organizations-latest-en.json": { "title": "title_visibility_and_isolation_0D94E", "title_visibility_and_isolation_0D94E": "Visibility and isolation between organizations", "shortdesc": "shortdesc_visibility_and_isolation_0B5D3", "shortdesc_visibility_and_isolation_0B5D3": "Each organization is isolated from other organizations except through the parent-child relationships in the hierarchy, which protects both customer data and the partner's internal structure.", "content.p_visibility_and_isolation_081FB": "Organizations create visibility boundaries that are enforced by Elements RBAC regardless of role assignments. A security administrator cannot see organizations outside their visibility, even if granted broad permissions.", "content.title_visibility_and_isolation_04F6C": "What each security administrator sees", "content.p_visibility_and_isolation_013F3": "The set of organizations visible to a security administrator depends on which organization they belong to:", "content.dt_visibility_and_isolation_0AA15": "Partner security administrators", "content.dd_visibility_and_isolation_0767E": "See the Solution Provider, any Service Partners, and all Companies managed by the partner. They can switch between these organizations through the Scope Selector to perform management operations on behalf of customers.", "content.dt_visibility_and_isolation_0975A": "Company security administrators", "content.dd_visibility_and_isolation_0A999": "See only their own Company. They cannot see other Companies managed by the same partner, and they cannot see the partner organization above them.", "content.title_visibility_and_isolation_0A7A5": "What companies do not see", "content.p_visibility_and_isolation_0A6C7": "Company security administrators do not see the partner organization or other Companies managed by the same partner. Specifically, a Company security administrator cannot see:", "step.step_visibility_and_isolation_09879": "How many other Companies the partner manages, or which Companies they are.", "step.step_visibility_and_isolation_0A40E": "The partner's internal security groups or permission structure.", "step.step_visibility_and_isolation_01604": "Which partner security administrators have access to the Company, unless those security administrators are explicitly members of the Company.", "content.p_visibility_and_isolation_03362": "This isolation protects the partner's business structure and prevents customers from gaining competitive intelligence about the partner's other relationships.", "content.title_visibility_and_isolation_00CBF": "The Scope Selector", "content.p_visibility_and_isolation_0C6DD": "The Scope Selector is the user interface control that switches the current organizational context. The selected organization determines which security administrators, security groups, and role assignments appear in management screens, and it defines the scope for operations such as inviting security administrators or assigning roles.", "content.p_visibility_and_isolation_0F570": "Its behavior depends on the security administrator's organization:", "step.step_visibility_and_isolation_0D141": "For partner security administrators, the Scope Selector lists the Solution Provider, all Service Partners, and all managed Companies. Switching to a Company shows that Company's security administrators, security groups, and settings.", "step.step_visibility_and_isolation_00798": "For Company security administrators, the Scope Selector is locked to the single Company. There is no other organization to switch to.", "content.title_visibility_and_isolation_0C81D": "Restricting partner access to a company", "content.p_visibility_and_isolation_03351": "By default, a partner has inherited access to all Companies it manages. A Company can opt out of this inherited access for specific Elements features, blocking the partner's automatic access to those features while keeping the partner relationship intact for the rest of the product.", "content.p_visibility_and_isolation_04124": "If the partner still needs to assist with a feature the Company has restricted, the Company can explicitly invite a partner security administrator as a member of the Company. This makes the partner security administrator visible to the Company's security administrators and brings the relationship under the Company's control.", "desc": [ "content.p_visibility_and_isolation_081FB", "content.title_visibility_and_isolation_04F6C", "content.p_visibility_and_isolation_013F3", { "dl.dl_visibility_and_isolation_076E7": [ { "dlentry.dlentry_visibility_and_isolation_0AF09": [ "content.dt_visibility_and_isolation_0AA15", "content.dd_visibility_and_isolation_0767E" ] }, { "dlentry.dlentry_visibility_and_isolation_02386": [ "content.dt_visibility_and_isolation_0975A", "content.dd_visibility_and_isolation_0A999" ] } ] }, "content.title_visibility_and_isolation_0A7A5", "content.p_visibility_and_isolation_0A6C7", { "steps.ul_visibility_and_isolation_0DC12": [ "step.step_visibility_and_isolation_09879", "step.step_visibility_and_isolation_0A40E", "step.step_visibility_and_isolation_01604" ] }, "content.p_visibility_and_isolation_03362", "content.title_visibility_and_isolation_00CBF", "content.p_visibility_and_isolation_0C6DD", "content.p_visibility_and_isolation_0F570", { "steps.ul_visibility_and_isolation_02E88": [ "step.step_visibility_and_isolation_0D141", "step.step_visibility_and_isolation_00798" ] }, "content.title_visibility_and_isolation_0C81D", "content.p_visibility_and_isolation_03351", "content.p_visibility_and_isolation_04124" ], "related": [ "restricting_partner_access_to_a_company-latest-en" ] }, "organization_moves_and_access_control-latest-en.json": { "title": "title_what_happens_when_organi_03AC0", "title_what_happens_when_organi_03AC0": "What happens when an organization moves in the hierarchy", "shortdesc": "shortdesc_what_happens_when_organi_03C56", "shortdesc_what_happens_when_organi_03C56": "When an organization moves within the hierarchy, Elements automatically revalidates the affected role assignments to maintain security boundaries, but does not revalidate existing memberships.", "content.p_what_happens_when_organi_02BED": "An organizational move changes the parent of the moved organization. Because role assignments and inheritance depend on the hierarchy, Elements automatically revalidates the resulting configuration and updates it where needed. Memberships are not changed automatically and may need a manual review.", "content.title_what_happens_when_organi_080B6": "Automatic revalidation of role assignments", "content.p_what_happens_when_organi_0987F": "Elements automatically revalidates every role assignment that crosses organization boundaries to or from the moved organization. Elements also enforces the cross-organization assignment rules in the new location.", "content.title_what_happens_when_organi_032BD": "Effects on role assignments", "cell.entry_what_happens_when_organi_05448": "Assignment type", "cell.entry_what_happens_when_organi_0E723": "What happens", "cell.entry_what_happens_when_organi_0486F": "Assignments that remain valid", "cell.entry_what_happens_when_organi_04035": "Role assignments stay in effect when the subject's organization is still compatible with the moved organization's new location in the hierarchy.", "cell.entry_what_happens_when_organi_0B7E4": "Inherited assignments", "cell.entry_what_happens_when_organi_01E31": "Elements recalculates inherited role assignments. The moved organization now inherits from its new parent organizations and no longer inherits from the previous parents.", "cell.entry_what_happens_when_organi_00FA7": "Assignments that become invalid", "cell.entry_what_happens_when_organi_09272": "Elements removes role assignments where the subject belongs to an organization that is unrelated to the new parent. Elements enforces the cross-organization rule in the new hierarchy.", "content.title_what_happens_when_organi_0E062": "Memberships are not revalidated automatically", "content.p_what_happens_when_organi_0096C": "Elements preserves existing memberships in the moved organization after the move and does not re-evaluate whether current members should remain. After the move, review the membership list and remove any security administrators or security groups whose membership is no longer appropriate.", "desc": [ "content.p_what_happens_when_organi_02BED", "content.title_what_happens_when_organi_080B6", "content.p_what_happens_when_organi_0987F", "content.title_what_happens_when_organi_032BD", { "table.table_effects-on-role-assignments": [ { "thead.thead_what_happens_when_organi_0735D": [ "cell.entry_what_happens_when_organi_05448", "cell.entry_what_happens_when_organi_0E723" ] }, { "row.row_what_happens_when_organi_01C34": [ "cell.entry_what_happens_when_organi_0486F", "cell.entry_what_happens_when_organi_04035" ] }, { "row.row_what_happens_when_organi_09EBC": [ "cell.entry_what_happens_when_organi_0B7E4", "cell.entry_what_happens_when_organi_01E31" ] }, { "row.row_what_happens_when_organi_0D945": [ "cell.entry_what_happens_when_organi_00FA7", "cell.entry_what_happens_when_organi_09272" ] } ] }, "content.title_what_happens_when_organi_0E062", "content.p_what_happens_when_organi_0096C" ] }, "creating_service_partners-latest-en.json": { "title": "title_creating_service_partner_02751", "title_creating_service_partner_02751": "Create a service partner", "shortdesc": "shortdesc_creating_service_partner_05CBB", "shortdesc_creating_service_partner_05CBB": "Create a Service Partner sub-organization to group related Companies under your Solution Provider.", "content.p_creating_service_partner_060C8": "Before you start, make sure you have:", "step.step_creating_service_partner_04BE7": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role at the Solution Provider level.", "step.step_creating_service_partner_08D98": "RBAC turned on in the Solution Provider organization.", "content.p_creating_service_partner_07F2F": "Service Partners are recommended sub-organizations used to segregate access and to group related Companies under the Solution Provider. Create at least one Service Partner in every deployment, even if it will hold all your Companies, since this is the only way to scope roles such as IAM Administrator, API Key Management, and Audit Log access to Companies rather than to the whole partner organization. Create additional Service Partners when:", "step.step_creating_service_partner_0ADCD": "Different teams manage different customer segments.", "step.step_creating_service_partner_06A76": "You want to organize Companies by industry (for example, Healthcare, Legal, or Finance).", "step.step_creating_service_partner_0998E": "You offer different service tiers that require segregated access.", "content.p_creating_service_partner_060E6": "", "content.p_creating_service_partner_0E392": "The organization list appears.", "step.step_creating_service_partner_048F0": "Go to Management > Organization Settings.", "step.step_creating_service_partner_0DA8E": "Click the three-dot menu next to the Settings button.", "step.step_creating_service_partner_0F8A5": "Select Create service partner.", "content.p_creating_service_partner_0B269": "For example: Healthcare, Legal, or Enterprise Tier.", "step.step_creating_service_partner_046F2": "Enter a name for the service partner.", "step.step_creating_service_partner_039EB": "Click Save.", "content.p_creating_service_partner_0EF91": "A new Service Partner sub-organization is created under the Solution Provider. It appears in the organization hierarchy and can be used as a scope for role assignments.", "content.note_creating_service_partner_08A92": "Note: You need to log out and log in again to see the new Service Partner in the Scope Selector.", "desc": [ "content.p_creating_service_partner_060C8", { "steps.ul_creating_service_partner_074AE": [ "step.step_creating_service_partner_04BE7", "step.step_creating_service_partner_08D98" ] }, "content.p_creating_service_partner_07F2F", { "steps.ul_creating_service_partner_03A61": [ "step.step_creating_service_partner_0ADCD", "step.step_creating_service_partner_06A76", "step.step_creating_service_partner_0998E" ] }, { "steps.steps_creating_service_partner_06FDB": [ "step.step_creating_service_partner_048F0", "content.p_creating_service_partner_060E6", "content.p_creating_service_partner_0E392", "step.step_creating_service_partner_0DA8E", "step.step_creating_service_partner_0F8A5", "step.step_creating_service_partner_046F2", "content.p_creating_service_partner_0B269", "step.step_creating_service_partner_039EB" ] }, "content.p_creating_service_partner_0EF91", "content.note_creating_service_partner_08A92" ], "related": [ "enabling_rbac-latest-en", "best_practices_for_organizations-latest-en", "moving_companies_under_service_provider-latest-en" ] }, "moving_companies_under_service_provider-latest-en.json": { "title": "title_moving_companies_to_anot_089BD", "title_moving_companies_to_anot_089BD": "Move a company to another service partner", "shortdesc": "shortdesc_moving_companies_to_anot_0B1A1", "shortdesc_moving_companies_to_anot_0B1A1": "Move a Company under a Service Partner to organize the partner hierarchy into logical groupings.", "content.p_moving_companies_to_anot_06B44": "Before you start, make sure you have:", "step.step_moving_companies_to_anot_0E219": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role at the Solution Provider level.", "step.step_moving_companies_to_anot_07201": "RBAC turned on in the Solution Provider organization.", "step.step_moving_companies_to_anot_02B85": "At least one Service Partner created as the move target.", "content.p_moving_companies_to_anot_0771F": "Use Service Partners to group related Companies (for example, by managing team, industry, or service tier). Moving Companies under Service Partners establishes the three-level hierarchy and allows you to scope role assignments to a specific Service Partner rather than to each Company individually.", "content.p_moving_companies_to_anot_04488": "The organization list appears.", "step.step_moving_companies_to_anot_00EF8": "Go to Management > Organization Settings.", "step.step_moving_companies_to_anot_05282": "Locate the Company you want to move.", "step.step_moving_companies_to_anot_001F4": "Click the three-dot menu next to the Company.", "step.step_moving_companies_to_anot_08C37": "Select Move company to another partner.", "step.step_moving_companies_to_anot_0947E": "Choose the target Service Partner from the dropdown.", "step.step_moving_companies_to_anot_0B35A": "Click Save.", "content.p_moving_companies_to_anot_0374F": "The Company is now organized under the selected Service Partner. The hierarchy reflects the new structure, for example:", "content.note_moving_companies_to_anot_02D7F": "Important: Existing role assignments that cross organization boundaries to the moved Company are automatically revalidated against the new hierarchy, and any that are no longer valid in the new location are removed.", "content.note_moving_companies_to_anot_06AA6": "Note: You need to log out and log in again to see the changes in the Scope Selector.", "desc": [ "content.p_moving_companies_to_anot_06B44", { "steps.ul_moving_companies_to_anot_0CE98": [ "step.step_moving_companies_to_anot_0E219", "step.step_moving_companies_to_anot_07201", "step.step_moving_companies_to_anot_02B85" ] }, "content.p_moving_companies_to_anot_0771F", { "steps.steps_moving_companies_to_anot_072F1": [ "step.step_moving_companies_to_anot_00EF8", "content.p_moving_companies_to_anot_04488", "step.step_moving_companies_to_anot_05282", "step.step_moving_companies_to_anot_001F4", "step.step_moving_companies_to_anot_08C37", "step.step_moving_companies_to_anot_0947E", "step.step_moving_companies_to_anot_0B35A" ] }, "content.p_moving_companies_to_anot_0374F", "content.note_moving_companies_to_anot_02D7F", "content.note_moving_companies_to_anot_06AA6" ], "related": [ "best_practices_for_organizations-latest-en", "organization_moves_and_access_control-latest-en" ] }, "concept_restrict_partner_access-latest-en.json": { "title": "title_what_restricting_partner_0EE31", "title_what_restricting_partner_0EE31": "What restricting partner access means", "shortdesc": "shortdesc_what_restricting_partner_00685", "shortdesc_what_restricting_partner_00685": "A company can block its managing partner from inheriting access to specific Elements features, while keeping the partner relationship intact for everything else.", "content.p_what_restricting_partner_021D1": "By default, a company inherits the role assignments that its managing partner creates at parent levels of the hierarchy. This inheritance is how partner security administrators gain access to the company. A company can override this default and block the partner from inheriting access to a defined set of features.", "content.p_what_restricting_partner_01822": "The restriction applies only to the following areas:", "step.step_what_restricting_partner_0E8A2": "Exposure Management,", "step.step_what_restricting_partner_0EDD8": "Collaboration Protection, and", "step.step_what_restricting_partner_0EBA5": "access control itself.", "content.p_what_restricting_partner_02713": "When the restriction is active, partner security administrators who would have received the blocked roles through inheritance no longer have the corresponding access in this company. Other inherited partner roles continue to apply as normal, and role assignments made directly at the company level are not affected.", "content.p_what_restricting_partner_04DA1": "The restriction changes inheritance only. It does not remove the partner relationship, and it does not change which features the company itself can use.", "content.note_what_restricting_partner_0F8CD": "Note: If the partner still needs to assist with a restricted feature, the company can explicitly invite a partner security administrator as a member of the company. The partner security administrator then becomes visible to the company security administrators, and the company controls that access.", "desc": [ "content.p_what_restricting_partner_021D1", "content.p_what_restricting_partner_01822", { "steps.ul_what_restricting_partner_0336A": [ "step.step_what_restricting_partner_0E8A2", "step.step_what_restricting_partner_0EDD8", "step.step_what_restricting_partner_0EBA5" ] }, "content.p_what_restricting_partner_02713", "content.p_what_restricting_partner_04DA1", "content.note_what_restricting_partner_0F8CD" ] }, "restricting_partner_access_to_a_company-latest-en.json": { "title": "title_restricting_partner_acce_08CE8", "title_restricting_partner_acce_08CE8": "Restrict partner access to a company", "shortdesc": "shortdesc_restricting_partner_acce_00C4B", "shortdesc_restricting_partner_acce_00C4B": "Block a subset of inherited partner role assignments for a company, so that partner security administrators do not have those roles in this company.", "content.p_restricting_partner_acce_002A9": "Before you start, make sure you have the Identity and Access Management (IAM) Administrator role or the Elements Editing All role in the company organization.", "content.p_restricting_partner_acce_02450": "By default, a company inherits the role assignments that its managing partner creates at parent levels of the hierarchy. You can block the partner from inheriting access to specific features. The restriction applies only to Exposure Management, Collaboration Protection, and access control itself. Other inherited partner roles, and role assignments made directly at the company level, are not affected.", "step.step_restricting_partner_acce_0DD3B": "Select the company organization in the Scope Selector.", "step.step_restricting_partner_acce_0A3F4": "Go to Organization Settings > General > Access Policies.", "step.step_restricting_partner_acce_0CBBF": "Turn on Restrict Partner access.", "content.p_restricting_partner_acce_00545": "You can restrict roles in Exposure Management, Collaboration Protection, and access control.", "step.step_restricting_partner_acce_07FDC": "Select the partner roles that should not be inherited in this company.", "content.p_restricting_partner_acce_0AA23": "Partner security administrators who would have received the selected roles through inheritance no longer have the corresponding access in this company. Other inherited partner roles, and role assignments made directly at the company level, continue to apply.", "desc": [ "content.p_restricting_partner_acce_002A9", "content.p_restricting_partner_acce_02450", { "steps.steps_restricting_partner_acce_0A10D": [ "step.step_restricting_partner_acce_0DD3B", "step.step_restricting_partner_acce_0A3F4", "step.step_restricting_partner_acce_0CBBF", "step.step_restricting_partner_acce_07FDC", "content.p_restricting_partner_acce_00545" ] }, "content.p_restricting_partner_acce_0AA23" ], "related": [ "checking_effective_roles_for_a_user-latest-en" ] }, "organization_limitations-latest-en.json": { "title": "title_organization_limitations_00615", "title_organization_limitations_00615": "Organization limitations", "shortdesc": "shortdesc_organization_limitations_02443", "shortdesc_organization_limitations_02443": "Several constraints affect how organizations, their members, and their role assignments can be configured in Elements RBAC.", "content.p_organization_limitations_0A28E": "Plan organizational deployments with the following constraints in mind:", "content.dt_organization_limitations_0DEE2": "Organization membership is distinct from access", "content.dd_organization_limitations_0A358": "", "content.dd_p_organization_limitations_0D35C": "Being a member of an organization is not the same as having access to it:
", "content.dt_organization_limitations_07F6F": "Membership", "content.dd_organization_limitations_0699F": "A security administrator explicitly belongs to the organization's directory and is visible to Identity and Access Management (IAM) administrators in that organization.", "content.dt_organization_limitations_07920": "Access", "content.dd_organization_limitations_0EFB8": "A security administrator has role assignments that allow them to work with the organization's resources.", "content.dd_p_organization_limitations_0611C": "Partner security administrators typically have access to managed Companies without being members of those Companies, which keeps them invisible to Company IAM administrators.
", "content.dt_organization_limitations_0BCBC": "Security groups and members must share an organization", "content.dd_organization_limitations_070C1": "A security administrator and a security group must belong to the same organization to be linked through membership. You cannot, for example, add a security administrator from one Company to a security group in another Company.", "content.dt_organization_limitations_0844D": "Multiple organization membership is discouraged", "content.dd_organization_limitations_0EB73": "", "content.dd_p_organization_limitations_06BFC": "A security administrator can belong to multiple organizations, but this is discouraged because it creates ambiguity:
", "choice.choice_organization_limitations_00594": "It is unclear which organization manages the security administrator.", "choice.choice_organization_limitations_04A53": "Permissions become harder to track.", "choice.choice_organization_limitations_04629": "The security administrator can appear in multiple contexts simultaneously.", "content.dd_p_organization_limitations_049C3": "Partner security administrators should belong only to the Solution Provider. Company security administrators should belong only to their own Company.
", "content.dt_organization_limitations_0859D": "Role assignments require explicit scope", "content.dd_organization_limitations_0943A": "", "content.dd_p_organization_limitations_069C5": "When assigning roles from a partner organization, you must specify the target organization as the scope. There is no default scope. The level you choose determines the reach of the assignment:
", "choice.choice_organization_limitations_01CBF": "Granting at the Solution Provider level applies to the entire hierarchy below.", "choice.choice_organization_limitations_09B38": "Granting at a Service Partner level applies to that Service Partner and the Companies under it.", "choice.choice_organization_limitations_0E1D9": "Granting at a Company level applies only to that Company.", "content.dt_organization_limitations_07C02": "RBAC must be enabled per organization", "content.dd_organization_limitations_01CCA": "RBAC enablement is per-organization. Turning on RBAC in a Solution Provider does not automatically enable it in the managed Companies. Each organization opts in independently, which allows partners to migrate gradually.", "desc": [ "content.p_organization_limitations_0A28E", { "dl.dl_organization_limitations_09FCD": [ { "dlentry.dlentry_organization_limitations_0E091": [ "content.dt_organization_limitations_0DEE2", "content.dd_organization_limitations_0A358", "content.dd_p_organization_limitations_0D35C", { "dl.dl_organization_limitations_09EFF": [ { "dlentry.dlentry_organization_limitations_05D25": [ "content.dt_organization_limitations_07F6F", "content.dd_organization_limitations_0699F" ] }, { "dlentry.dlentry_organization_limitations_0DBC4": [ "content.dt_organization_limitations_07920", "content.dd_organization_limitations_0EFB8" ] } ] }, "content.dd_p_organization_limitations_0611C" ] }, { "dlentry.dlentry_organization_limitations_092B7": [ "content.dt_organization_limitations_0BCBC", "content.dd_organization_limitations_070C1" ] }, { "dlentry.dlentry_organization_limitations_099D0": [ "content.dt_organization_limitations_0844D", "content.dd_organization_limitations_0EB73", "content.dd_p_organization_limitations_06BFC", { "choices.ul_organization_limitations_0E023": [ "choice.choice_organization_limitations_00594", "choice.choice_organization_limitations_04A53", "choice.choice_organization_limitations_04629" ] }, "content.dd_p_organization_limitations_049C3" ] }, { "dlentry.dlentry_organization_limitations_009AF": [ "content.dt_organization_limitations_0859D", "content.dd_organization_limitations_0943A", "content.dd_p_organization_limitations_069C5", { "choices.ul_organization_limitations_031E7": [ "choice.choice_organization_limitations_01CBF", "choice.choice_organization_limitations_09B38", "choice.choice_organization_limitations_0E1D9" ] } ] }, { "dlentry.dlentry_organization_limitations_0543B": [ "content.dt_organization_limitations_07C02", "content.dd_organization_limitations_01CCA" ] } ] } ], "related": [ "organization_membership_and_access-latest-en", "locally_created_and_provisioned_security_groups-latest-en" ] }, "managing_security_administrators-latest-en.json": { "title": "title_managing_security_admini_04996", "title_managing_security_admini_04996": "Managing security administrators", "shortdesc": "shortdesc_managing_security_admini_06138", "shortdesc_managing_security_admini_06138": "Security administrators sign in to Elements Security Center to monitor and manage the managed organization's security.", "content.p_managing_security_admini_02DA0": "Each security administrator account has an owner. You can invite and manage accounts manually or let Microsoft Entra ID manage their lifecycle. Choose the approach that fits your environment. Microsoft Entra ID integration is recommended for organizations that already use Microsoft 365. Manual management suits smaller teams.", "desc": [ "content.p_managing_security_admini_02DA0" ] }, "account_types_and_ownership-latest-en.json": { "title": "title_account_types_and_owners_0A39A", "title_account_types_and_owners_0A39A": "Account types and ownership", "shortdesc": "shortdesc_account_types_and_owners_0911D", "shortdesc_account_types_and_owners_0911D": "Security administrator accounts differ by ownership model, role within the organization, and how they relate to the wider Elements directory.", "content.p_account_types_and_owners_07B71": "Security administrator accounts differ in four ways:", "step.step_account_types_and_owners_0722F": "the distinction between federated and local accounts", "step.step_account_types_and_owners_0080C": "the special role of the root user", "step.step_account_types_and_owners_0D771": "how membership and access work together", "step.step_account_types_and_owners_0DBC0": "the cross-tenant policies that govern who can invite whom", "content.p_account_types_and_owners_02D9C": "Understand these differences before you start inviting security administrators, so that the lifecycle decisions you make are intentional.", "desc": [ "content.p_account_types_and_owners_07B71", { "steps.ul_account_types_and_owners_06817": [ "step.step_account_types_and_owners_0722F", "step.step_account_types_and_owners_0080C", "step.step_account_types_and_owners_0D771", "step.step_account_types_and_owners_0DBC0" ] }, "content.p_account_types_and_owners_02D9C" ] }, "account_ownership_federated_and_local_accounts-latest-en.json": { "title": "title_account_ownership_federa_0006D", "title_account_ownership_federa_0006D": "Account Ownership: federated and local accounts", "shortdesc": "shortdesc_account_ownership_federa_0E1F4", "shortdesc_account_ownership_federa_0E1F4": "Elements supports two account ownership models (federated and local) which determine who controls a user account and what management capabilities Identity and Access Management (IAM) administrators have over it.", "content.title_account_ownership_federa_02B1E": "Federated accounts", "content.p_account_ownership_federa_0B73C": "A federated account is a user account where SSO Federation is enabled for the user's email domain. The account is owned by the federated organization, not by the user. Authentication is handled by Microsoft Entra ID, so the user does not have an Elements password. The IAM administrator has full control over the account.", "content.p_account_ownership_federa_0C3D0": "An IAM administrator can:", "step.step_account_ownership_federa_00056": "Remove the user from an organization they manage (standard removal).", "step.step_account_ownership_federa_02CE9": "Remove the user from all organizations in the Elements system (hard delete).", "step.step_account_ownership_federa_0259E": "Delete the user even if the user is invited to organizations outside the IAM administrator's scope.", "content.p_account_ownership_federa_0E2CB": "The user cannot:", "step.step_account_ownership_federa_07ACC": "Change their own account details in Elements.", "step.step_account_ownership_federa_0EAE9": "Control the account lifecycle.", "step.step_account_ownership_federa_061A3": "Remain in the system after the organization removes them.", "content.p_account_ownership_federa_0537E": "The security benefits of a federated account include centralized identity governance, immediate revocation, MFA enforced by Entra ID, password policies managed centrally, and an audit trail in Entra ID.", "content.p_account_ownership_federa_01E29": "A federated account is created when SSO Federation is configured for the user's email domain and the organization proves domain ownership through Entra integration.", "content.p_account_ownership_federa_05617": "We recommend federated accounts for organizational users, to enable full IAM administrator control and centralized identity management.", "content.title_account_ownership_federa_07DC9": "Local accounts", "content.p_account_ownership_federa_042FD": "A local account is a user account created without SSO Federation, by manual invitation. The account is owned by the user and WithSecure. Authentication uses an Elements password and MFA. The IAM administrator has limited control over the account.", "content.p_account_ownership_federa_08CAA": "An IAM administrator can:", "step.step_account_ownership_federa_091E4": "Remove the user from organizations they manage.", "step.step_account_ownership_federa_00B9A": "Remove role assignments granted through their organizations.", "step.step_account_ownership_federa_04704": "Remove the user from security groups in their organizations.", "content.p_account_ownership_federa_0116C": "An IAM administrator cannot:", "step.step_account_ownership_federa_04BD2": "See the user's membership in organizations they do not manage.", "step.step_account_ownership_federa_07671": "Remove the user from organizations outside their scope.", "step.step_account_ownership_federa_020C7": "Perform hard deletion of the user account.", "step.step_account_ownership_federa_0505C": "Fully control the account lifecycle.", "content.p_account_ownership_federa_0B781": "The user can:", "step.step_account_ownership_federa_00BF9": "Accept invitations to multiple organizations independently.", "step.step_account_ownership_federa_07CF8": "Exist in organizations unknown to a specific IAM administrator.", "step.step_account_ownership_federa_05DF6": "Retain the account even after removal from one organization.", "content.p_account_ownership_federa_05FA5": "Local accounts are useful for small organizations without Microsoft 365, guest accounts, contractors who need temporary access, and organizations not ready for Entra integration.", "content.note_account_ownership_federa_0B1E1": "Note: A local account can become federated if SSO is later configured for its email domain. The first time the user signs in after federation is enabled, the user is prompted for their existing Elements password once. This links the local account to the federated identity. From the next sign-in onwards, authentication uses Entra ID and no Elements password is required.", "desc": [ "content.title_account_ownership_federa_02B1E", "content.p_account_ownership_federa_0B73C", "content.p_account_ownership_federa_0C3D0", { "steps.ul_account_ownership_federa_09E04": [ "step.step_account_ownership_federa_00056", "step.step_account_ownership_federa_02CE9", "step.step_account_ownership_federa_0259E" ] }, "content.p_account_ownership_federa_0E2CB", { "steps.ul_account_ownership_federa_0ECDD": [ "step.step_account_ownership_federa_07ACC", "step.step_account_ownership_federa_0EAE9", "step.step_account_ownership_federa_061A3" ] }, "content.p_account_ownership_federa_0537E", "content.p_account_ownership_federa_01E29", "content.p_account_ownership_federa_05617", "content.title_account_ownership_federa_07DC9", "content.p_account_ownership_federa_042FD", "content.p_account_ownership_federa_08CAA", { "steps.ul_account_ownership_federa_09BBC": [ "step.step_account_ownership_federa_091E4", "step.step_account_ownership_federa_00B9A", "step.step_account_ownership_federa_04704" ] }, "content.p_account_ownership_federa_0116C", { "steps.ul_account_ownership_federa_011A9": [ "step.step_account_ownership_federa_04BD2", "step.step_account_ownership_federa_07671", "step.step_account_ownership_federa_020C7", "step.step_account_ownership_federa_0505C" ] }, "content.p_account_ownership_federa_0B781", { "steps.ul_account_ownership_federa_05670": [ "step.step_account_ownership_federa_00BF9", "step.step_account_ownership_federa_07CF8", "step.step_account_ownership_federa_05DF6" ] }, "content.p_account_ownership_federa_05FA5", "content.note_account_ownership_federa_0B1E1" ], "related": [ "task_changing_account_details-latest-en" ] }, "root_user-latest-en.json": { "title": "title_root_user_000001_D32DCA6B", "title_root_user_000001_D32DCA6B": "Root User", "shortdesc": "shortdesc_root_user_000002_EE27E10B", "shortdesc_root_user_000002_EE27E10B": "The root user is the first administrator in an organization and receives the Elements Editing All role assigned directly to the user account, to make sure that at least one account always has full administrative access.", "content.p_root_user_000010_FFC2AE25": "When a new organization first uses RBAC, no security groups exist yet and no other users have been invited. The first user in that organization is the root user. The root user receives the Elements Editing All role assigned directly to the user account, not through a security group.", "content.p_root_user_000012_54E7EAD4": "The root user account serves two purposes:", "step.step_root_user_000014_D6F77804": "It guarantees that at least one account in the organization has full administrative access. If other access is revoked or misconfigured, the root user can recover the organization.", "step.step_root_user_000016_A10DD5CD": "It allows the first administrator to set up the rest of the organization, including creating security groups, inviting other users, and configuring role assignments.", "content.p_root_user_000018_CEE827C4": "The root user is the recommended exception to the general guidance that roles should be assigned to security groups rather than to individual users. Other direct role assignments can be removed once security groups are in place. The root user's direct assignment is kept indefinitely as a fallback for recovery.", "content.p_root_user_000019_2FCA515C": "Each organization has its own root user:", "step.step_root_user_00001B_CE3F0DBF": "In a partner organization, the first user invited to the Solution Provider is the partner's root user.", "step.step_root_user_00001D_406E2A0E": "In a company organization, the first administrator (usually invited by the partner on behalf of the customer) is that company's root user.", "content.note_root_user_00001F_F1CEE201": "Important: Do not remove the Elements Editing All role from the root user even after security groups are configured. Doing so risks locking the organization out of full administrative access if security group memberships fail or are misconfigured.", "desc": [ "content.p_root_user_000010_FFC2AE25", "content.p_root_user_000012_54E7EAD4", { "steps.ul_root_user_000013_FE4E0723": [ "step.step_root_user_000014_D6F77804", "step.step_root_user_000016_A10DD5CD" ] }, "content.p_root_user_000018_CEE827C4", "content.p_root_user_000019_2FCA515C", { "steps.ul_root_user_00001A_73126AFD": [ "step.step_root_user_00001B_CE3F0DBF", "step.step_root_user_00001D_406E2A0E" ] }, "content.note_root_user_00001F_F1CEE201" ] }, "organization_membership_and_access-latest-en.json": { "title": "title_organization_membership__0DCF7", "title_organization_membership__0DCF7": "Organization membership and access", "shortdesc": "shortdesc_organization_membership__08981", "shortdesc_organization_membership__08981": "Membership (belonging to an organization) and access (having permissions in that organization) are separate in Elements, and a user can have one without the other.", "content.p_organization_membership__07525": "A user joins an organization by being explicitly invited to it. Membership determines what the user can see and manage, subject to further restriction through role assignments. A user can belong to multiple organizations, although we do not recommend this.", "content.p_organization_membership__0D4D6": "Membership and access are two distinct concepts:", "content.dt_organization_membership__00730": "Member of an organization", "content.dd_organization_membership__0CE21": "The user exists in that organization's directory, is visible to Identity and Access Management (IAM) administrators of the organization, and may later be granted access to the organization or its child organizations.", "content.dt_organization_membership__04C18": "Access to an organization", "content.dd_organization_membership__097CF": "The user has role assignments for that organization. The user can have access even if they are only a member of a parent organization.", "content.p_organization_membership__03E13": "A user can exist in security groups without any role assignments, in which case the user has no access yet.", "content.p_organization_membership__0184A": "Partner users typically have access to companies without being members of those companies. This keeps partner users invisible to company administrators.", "desc": [ "content.p_organization_membership__07525", "content.p_organization_membership__0D4D6", { "dl.dl_organization_membership__0F649": [ { "dlentry.dlentry_organization_membership__0BFFE": [ "content.dt_organization_membership__00730", "content.dd_organization_membership__0CE21" ] }, { "dlentry.dlentry_organization_membership__03D93": [ "content.dt_organization_membership__04C18", "content.dd_organization_membership__097CF" ] } ] }, "content.p_organization_membership__03E13", "content.p_organization_membership__0184A" ] }, "cross_tenant_access_policies-latest-en.json": { "title": "title_cross_tenant_access_poli_0BF92", "title_cross_tenant_access_poli_0BF92": "Cross-tenant access policies", "shortdesc": "shortdesc_cross_tenant_access_poli_04123", "shortdesc_cross_tenant_access_poli_04123": "Elements enforces cross-tenant access policies that restrict which users an organization can invite, to prevent phishing and unauthorized access between unrelated tenants.", "content.p_cross_tenant_access_poli_047EB": "Cross-tenant access policies prevent malicious organizations from phishing users, protect against unauthorized cross-tenant access, and maintain organizational boundaries between tenants.", "content.title_cross_tenant_access_poli_09EED": "Policy rules", "content.p_cross_tenant_access_poli_00891": "An organization cannot invite a user if:", "step.step_cross_tenant_access_poli_0086C": "The user belongs to an unrelated organization.", "step.step_cross_tenant_access_poli_0DB1A": "The invitation would create a security risk.", "content.p_cross_tenant_access_poli_08071": "An organization can invite a user if:", "step.step_cross_tenant_access_poli_03D91": "The user does not yet exist in Elements.", "step.step_cross_tenant_access_poli_0339C": "The user belongs to the managing partner organization.", "step.step_cross_tenant_access_poli_0AE5C": "The user is already associated with the inviting organization or with its managing partner organization in other WithSecure portals, such as the Partner Portal.", "content.title_cross_tenant_access_poli_07FDD": "Examples", "content.p_cross_tenant_access_poli_0FBFB": "Allowed invitations:", "step.step_cross_tenant_access_poli_0AB5E": "A partner invites a new user to a company the partner manages.", "step.step_cross_tenant_access_poli_01072": "A company invites its own employees.", "step.step_cross_tenant_access_poli_08894": "A company invites an employee of its managing partner.", "content.p_cross_tenant_access_poli_03769": "Blocked invitations:", "step.step_cross_tenant_access_poli_06E3B": "A competitor tries to invite users from another organization.", "step.step_cross_tenant_access_poli_0A485": "A partner organization attempts to add users of a company it does not manage.", "step.step_cross_tenant_access_poli_07E91": "A user from organization A is invited to a trial organization T.", "desc": [ "content.p_cross_tenant_access_poli_047EB", "content.title_cross_tenant_access_poli_09EED", "content.p_cross_tenant_access_poli_00891", { "steps.ul_cross_tenant_access_poli_092FF": [ "step.step_cross_tenant_access_poli_0086C", "step.step_cross_tenant_access_poli_0DB1A" ] }, "content.p_cross_tenant_access_poli_08071", { "steps.ul_cross_tenant_access_poli_09776": [ "step.step_cross_tenant_access_poli_03D91", "step.step_cross_tenant_access_poli_0339C", "step.step_cross_tenant_access_poli_0AE5C" ] }, "content.title_cross_tenant_access_poli_07FDD", "content.p_cross_tenant_access_poli_0FBFB", { "steps.ul_cross_tenant_access_poli_0DF4D": [ "step.step_cross_tenant_access_poli_0AB5E", "step.step_cross_tenant_access_poli_01072", "step.step_cross_tenant_access_poli_08894" ] }, "content.p_cross_tenant_access_poli_03769", { "steps.ul_cross_tenant_access_poli_010D4": [ "step.step_cross_tenant_access_poli_06E3B", "step.step_cross_tenant_access_poli_0A485", "step.step_cross_tenant_access_poli_07E91" ] } ] }, "inviting_and_managing_manually-latest-en.json": { "title": "title_inviting_and_managing_ma_00E2E", "title_inviting_and_managing_ma_00E2E": "Inviting and managing manually", "shortdesc": "shortdesc_inviting_and_managing_ma_0C516", "shortdesc_inviting_and_managing_ma_0C516": "Manage security administrators directly in Elements Security Center, without Microsoft Entra ID provisioning.", "content.p_inviting_and_managing_ma_00D95": "Manual management covers the day-to-day work for organizations that manage security administrators locally. Administrators:", "step.step_inviting_and_managing_ma_0327F": "Send invitations to partner and company organizations", "step.step_inviting_and_managing_ma_0FD64": "Create the first company administrator", "step.step_inviting_and_managing_ma_0C6BE": "Adjust security group membership", "step.step_inviting_and_managing_ma_00804": "Remove security administrators when access is no longer needed", "content.p_inviting_and_managing_ma_0A503": "Manual management is the right choice when an Entra ID tenant is not available. It also suits teams that are too small for automation to be worthwhile.", "desc": [ "content.p_inviting_and_managing_ma_00D95", { "steps.ul_inviting_and_managing_ma_0469E": [ "step.step_inviting_and_managing_ma_0327F", "step.step_inviting_and_managing_ma_0FD64", "step.step_inviting_and_managing_ma_0C6BE", "step.step_inviting_and_managing_ma_00804" ] }, "content.p_inviting_and_managing_ma_0A503" ] }, "managing_security_administrators_manually-latest-en.json": { "title": "title_managing_security_admini_09AC7", "title_managing_security_admini_09AC7": "Managing Security Administrators manually", "shortdesc": "shortdesc_managing_security_admini_0560A", "shortdesc_managing_security_admini_0560A": "Without Entra ID provisioning, all security administrators are managed manually in the Elements Security Center portal.", "content.p_managing_security_admini_052B1": "In manual mode, the Identity and Access Management (IAM) administrator uses the invitation wizard in the portal to invite security administrators. Each invited administrator receives an email and creates an account with an Elements password and multifactor authentication (MFA). They then become a member of the inviting organization.", "content.p_managing_security_admini_00361": "Daily tasks include adding and removing security administrators from security groups and removing them from organizations.", "desc": [ "content.p_managing_security_admini_052B1", "content.p_managing_security_admini_00361" ] }, "inviting_users_no_entra_id_provisioning-latest-en.json": { "title": "title_inviting_users_no_entra__03D87", "title_inviting_users_no_entra__03D87": "Inviting Users (no Entra ID Provisioning)", "shortdesc": "shortdesc_inviting_users_no_entra__0FBF1", "shortdesc_inviting_users_no_entra__0FBF1": "User invitation adds new security administrators to an organization, issued by partners for the companies they manage or by company administrators for their own company.", "content.p_inviting_users_no_entra__02D10": "Invitations are the manual alternative to Entra ID provisioning. They are used when an organization does not use System for Cross-domain Identity Management (SCIM) provisioning, or when adding an individual user outside the provisioned scope, such as a guest or contractor.", "content.p_inviting_users_no_entra__01AF0": "An invitation creates organization membership: the invited user appears in the organization's security administrators list. Whether the user gains access to the organization depends on the role assignments configured during, or after, the invitation.", "content.p_inviting_users_no_entra__06648": "Three invitation scenarios are common:", "step.step_inviting_users_no_entra__0A05F": "A partner administrator invites a partner employee to the Solution Provider organization.", "step.step_inviting_users_no_entra__02AE6": "A partner administrator invites the first company administrator to a customer's company organization.", "step.step_inviting_users_no_entra__0650E": "A company administrator invites a colleague to the company organization.", "content.p_inviting_users_no_entra__04D77": "What happens to the invitee depends on whether they already have an Elements account:", "content.dt_inviting_users_no_entra__0B21A": "New user", "content.dd_inviting_users_no_entra__0AAA2": "Elements creates a new account, sends an invitation e-mail with a temporary password, and requires multi-factor authentication setup on first sign-in.", "content.dt_inviting_users_no_entra__0FCF8": "Existing user", "content.dd_inviting_users_no_entra__09F83": "Elements adds the existing user as a member of the organization. No new account is created and no password is issued. The user sees the additional organization in the Scope Selector after the next sign-in.", "content.note_inviting_users_no_entra__0A3B3": "Important: A user can have access in more than one organization. If the email address already has rights in another company or partner account, an administrator of that account must remove the user there before you can manage them in this organization.", "content.note_inviting_users_no_entra__042DE": "Important: An invited user always becomes a member of the organization selected in the Scope Selector. Partners must select the Solution Provider organization when inviting partner employees, and the customer's company organization when inviting a customer administrator. Inviting a partner employee directly to a customer company breaks the recommended access model, and exposes the partner employee to the customer's Identity and Access Management (IAM) administrators.", "desc": [ "content.p_inviting_users_no_entra__02D10", "content.p_inviting_users_no_entra__01AF0", "content.p_inviting_users_no_entra__06648", { "steps.ul_inviting_users_no_entra__0E816": [ "step.step_inviting_users_no_entra__0A05F", "step.step_inviting_users_no_entra__02AE6", "step.step_inviting_users_no_entra__0650E" ] }, "content.p_inviting_users_no_entra__04D77", { "dl.dl_inviting_users_no_entra__02CF5": [ { "dlentry.dlentry_inviting_users_no_entra__0CF33": [ "content.dt_inviting_users_no_entra__0B21A", "content.dd_inviting_users_no_entra__0AAA2" ] }, { "dlentry.dlentry_inviting_users_no_entra__0EACE": [ "content.dt_inviting_users_no_entra__0FCF8", "content.dd_inviting_users_no_entra__09F83" ] } ] }, "content.note_inviting_users_no_entra__0A3B3", "content.note_inviting_users_no_entra__042DE" ], "related": [ "creating_the_first_company_administrator-latest-en", "account_ownership_federated_and_local_accounts-latest-en" ] }, "inviting_to_partner_organizations-latest-en.json": { "title": "title_inviting_to_partner_orga_08DF4", "title_inviting_to_partner_orga_08DF4": "Invite Security Administrator to Partner Organizations", "shortdesc": "shortdesc_inviting_to_partner_orga_00AC0", "shortdesc_inviting_to_partner_orga_00AC0": "Invite a partner employee to the Solution Provider organization, where the new user can be granted access through security groups.", "content.p_inviting_to_partner_orga_0824D": "Before you start, make sure you have:", "step.step_inviting_to_partner_orga_0F22F": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role at the Solution Provider level.", "step.step_inviting_to_partner_orga_07915": "The Solution Provider organization selected in the Scope Selector.", "step.step_inviting_to_partner_orga_0AC5A": "The user's email address.", "content.p_inviting_to_partner_orga_0722D": "Invited users always belong to the organization selected in the Scope Selector. Partner employees should be invited to the Solution Provider, not to customer companies.", "step.step_inviting_to_partner_orga_07C6D": "Go to Access Control > Security Administrators.", "content.p_inviting_to_partner_orga_06791": "", "step.step_inviting_to_partner_orga_0ED7F": "Click Invite Security Administrator.", "content.p_inviting_to_partner_orga_0904B": "If the email address already exists in Elements, the invitation adds the user to this organization, unless the user already has rights in another company or partner account. In that case, an administrator of that account must remove the user there first. If the email address is new, Elements creates a new account and sends an invitation email with a temporary password.", "content.p_inviting_to_partner_orga_04B43": "If you are inviting a partner employee, confirm that the Solution Provider is selected in the Scope Selector. A warning appears to prevent accidentally inviting a company user to the partner organization.
", "step.step_inviting_to_partner_orga_00A94": "Enter the user's email address, and click Next.", "content.p_inviting_to_partner_orga_065F1": "The user inherits all role assignments from the selected groups. We recommend using security groups instead of direct role assignments in the next step.", "step.step_inviting_to_partner_orga_05B6D": "Optionally select one or more security groups for the user, and click Next.", "content.note_inviting_to_partner_orga_0F28C": "Tip: We do not recommend direct role assignments except for root user accounts.", "step.step_inviting_to_partner_orga_01391": "Optionally assign roles directly to the user, and click Next.", "content.p_inviting_to_partner_orga_04852": "Verify that the organization membership is the Solution Provider and that the security group memberships are correct.", "step.step_inviting_to_partner_orga_0DFA5": "Review the invitation details on the summary page, and click Invite.", "content.p_inviting_to_partner_orga_0E799": "If the email address is new, the user receives an invitation email with a temporary password and must set up MFA. If the email address already existed, the user joins the organization as a member. The user becomes a member of the Solution Provider organization, is added to the selected security groups, and inherits permissions from those groups.", "desc": [ "content.p_inviting_to_partner_orga_0824D", { "steps.ul_inviting_to_partner_orga_06B0F": [ "step.step_inviting_to_partner_orga_0F22F", "step.step_inviting_to_partner_orga_07915", "step.step_inviting_to_partner_orga_0AC5A" ] }, "content.p_inviting_to_partner_orga_0722D", { "steps.steps_inviting_to_partner_orga_06515": [ "step.step_inviting_to_partner_orga_07C6D", "step.step_inviting_to_partner_orga_0ED7F", "content.p_inviting_to_partner_orga_06791", "step.step_inviting_to_partner_orga_00A94", "content.p_inviting_to_partner_orga_0904B", "content.p_inviting_to_partner_orga_04B43", "step.step_inviting_to_partner_orga_05B6D", "content.p_inviting_to_partner_orga_065F1", "step.step_inviting_to_partner_orga_01391", "content.note_inviting_to_partner_orga_0F28C", "step.step_inviting_to_partner_orga_0DFA5", "content.p_inviting_to_partner_orga_04852" ] }, "content.p_inviting_to_partner_orga_0E799" ], "related": [ "account_ownership_federated_and_local_accounts-latest-en" ] }, "inviting_a_security_administrator_to_a_company_organization-latest-en.json": { "title": "title_inviting_security_admini_06833", "title_inviting_security_admini_06833": "Invite Security Administrator to company organization", "shortdesc": "shortdesc_inviting_security_admini_037EB", "shortdesc_inviting_security_admini_037EB": "Invite a company employee as a security administrator in a specific company organization, where they become a member and can manage that company only.", "content.p_inviting_security_admini_05F24": "Before you start, make sure you have:", "step.step_inviting_security_admini_0060B": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "step.step_inviting_security_admini_04323": "The target company organization selected in the Scope Selector.", "step.step_inviting_security_admini_0A3BA": "The email address of the company employee.", "content.p_inviting_security_admini_024C7": "Company IAM administrators use this procedure to add employees to their own company. Partners use it to add the first company administrator on behalf of a customer.", "content.p_inviting_security_admini_0689F": "The Security Administrators tab lists the security administrators who belong to this company. It does not show partner security administrators, who belong to the partner organization even though they may have access to this company.", "step.step_inviting_security_admini_0997E": "Go to Access Control > Security Administrators.", "step.step_inviting_security_admini_071E4": "Click Invite Security Administrator.", "substep.substep_inviting_security_admini_01A89": "Enter the company employee's email address.", "substep.substep_inviting_security_admini_0B5BD": "Select one or more security groups, if any are created in the company.", "content.p_inviting_security_admini_040B6": "", "content.note_inviting_security_admini_012DE": "Tip: The first company administrator usually needs a direct role assignment, because no security group exists yet to grant them access. Assign the Elements Editing All role so they can finish setting up the company.", "substep.substep_inviting_security_admini_0B7A4": "Optionally, assign roles directly to the security administrator.", "substep.substep_inviting_security_admini_05D27": "Review the invitation details, and click Invite.", "step.step_inviting_security_admini_074B3": "In the Invitation Wizard, complete the following:", "content.p_inviting_security_admini_0E917": "The new security administrator becomes a member of the company organization and inherits permissions from the selected security groups. They see only this company in the Scope Selector and cannot see or access other companies or partner organizations.", "desc": [ "content.p_inviting_security_admini_05F24", { "steps.ul_inviting_security_admini_0641F": [ "step.step_inviting_security_admini_0060B", "step.step_inviting_security_admini_04323", "step.step_inviting_security_admini_0A3BA" ] }, "content.p_inviting_security_admini_024C7", { "steps.steps_inviting_security_admini_0153B": [ "step.step_inviting_security_admini_0997E", "content.p_inviting_security_admini_0689F", "step.step_inviting_security_admini_071E4", "step.step_inviting_security_admini_074B3", { "substeps.substepsalpha_invitingalpha_securityalpha_adminialpha_0AB78": [ "substep.substep_inviting_security_admini_01A89", "substep.substep_inviting_security_admini_0B5BD", "substep.substep_inviting_security_admini_0B7A4", "content.p_inviting_security_admini_040B6", "content.note_inviting_security_admini_012DE", "substep.substep_inviting_security_admini_05D27" ] } ] }, "content.p_inviting_security_admini_0E917" ] }, "creating_the_first_company_administrator-latest-en.json": { "title": "title_creating_the_first_compa_0D006", "title_creating_the_first_compa_0D006": "Create the first company administrator (Root Account)", "shortdesc": "shortdesc_creating_the_first_compa_0D25A", "shortdesc_creating_the_first_compa_0D25A": "Create the first security administrator account for a new company organization by inviting a user and assigning the Elements Editing All role directly.", "content.p_creating_the_first_compa_0094C": "Before you start, make sure you have:", "step.step_creating_the_first_compa_0BE83": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role in the partner organization.", "step.step_creating_the_first_compa_01576": "The target company organization selected in the Scope Selector.", "step.step_creating_the_first_compa_04FFA": "The email address of the person who will administer the company.", "content.p_creating_the_first_compa_08BFA": "A partner IAM administrator performs this procedure on behalf of a new customer. Because the company organization has no security groups yet, the role is assigned directly to the first security administrator.", "step.step_creating_the_first_compa_02022": "Go to Access Control > Security Administrators.", "step.step_creating_the_first_compa_0632A": "Click Invite Security Administrator.", "step.step_creating_the_first_compa_0F4D7": "Enter the email address, and click Next.", "step.step_creating_the_first_compa_0EF4D": "Skip the security groups step, and click Next.", "step.step_creating_the_first_compa_0B2A1": "Assign the Elements Editing All role directly to the security administrator, and click Next.", "step.step_creating_the_first_compa_05082": "Review the invitation details, and click Invite.", "content.p_creating_the_first_compa_0D23F": "The new security administrator becomes the company's IAM administrator. From this account, they can create security groups and invite additional company employees.", "desc": [ "content.p_creating_the_first_compa_0094C", { "steps.ul_creating_the_first_compa_0B07B": [ "step.step_creating_the_first_compa_0BE83", "step.step_creating_the_first_compa_01576", "step.step_creating_the_first_compa_04FFA" ] }, "content.p_creating_the_first_compa_08BFA", { "steps.steps_creating_the_first_compa_03AC6": [ "step.step_creating_the_first_compa_02022", "step.step_creating_the_first_compa_0632A", "step.step_creating_the_first_compa_0F4D7", "step.step_creating_the_first_compa_0EF4D", "step.step_creating_the_first_compa_0B2A1", "step.step_creating_the_first_compa_05082" ] }, "content.p_creating_the_first_compa_0D23F" ] }, "adding_a_security_administrator_to_security_group_manually-latest-en.json": { "title": "title_adding_a_security_admini_07B0D", "title_adding_a_security_admini_07B0D": "Add a security administrator to security group manually", "shortdesc": "shortdesc_adding_a_security_admini_0734C", "shortdesc_adding_a_security_admini_0734C": "Add a security administrator to a locally-managed security group so that the administrator inherits the group's role assignments.", "content.p_adding_a_security_admini_00513": "Before you start, make sure you have:", "step.step_adding_a_security_admini_06A25": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "step.step_adding_a_security_admini_0BB5D": "The organization where the security group belongs selected in the Scope Selector.", "step.step_adding_a_security_admini_0C3B9": "The security administrator must already belong to the same organization as the security group.", "content.p_adding_a_security_admini_0217C": "A security administrator and a security group must belong to the same organization to be linked. This procedure applies to locally-created security groups. Provisioned security groups cannot accept locally-managed members; their membership is managed exclusively in Entra ID.", "content.p_adding_a_security_admini_062B2": "You can add a security administrator to a security group from two starting points:", "step.step_adding_a_security_admini_0A9CF": "From the security group's details: convenient when adding several administrators to the same group.", "step.step_adding_a_security_admini_02618": "From the security administrator's details: convenient when adding one administrator to several groups.", "content.p_adding_a_security_admini_0346F": "Both approaches produce the same result.", "step.step_adding_a_security_admini_0A78F": "Select the organization in Scope Selector.", "step.step_adding_a_security_admini_072C1": "Go to Access Control > Security Groups.", "step.step_adding_a_security_admini_0EE47": "Click the security group name to open its details.", "content.p_adding_a_security_admini_041D2": "", "step.step_adding_a_security_admini_0FD13": "Open the Members tab.", "step.step_adding_a_security_admini_065AA": "Click Add Members button.", "content.p_adding_a_security_admini_0EB92": "", "content.note_adding_a_security_admini_0420A": "Note: A security group has a maximum number of members.", "step.step_adding_a_security_admini_0D7D3": "Select one or more security administrators, and click Add.", "step.step_adding_a_security_admini_0D3B5": "Click OK.", "content.p_adding_a_security_admini_0DF3E": "The selected security administrators become members of the security group and inherit all role assignments granted to the group.", "content.title_adding_a_security_admini_0CE1B": "Alternative: adding from the security administrator's details", "content.p_adding_a_security_admini_0A14A": "To start from the security administrator's details instead, follow these steps:", "step.step_adding_a_security_admini_05B92": "Go to Access Control > Security Administrators.", "step.step_adding_a_security_admini_04B00": "Click the email address of the security administrator to open the details.", "step.step_adding_a_security_admini_0363C": "Open the
Security Groups tab. ", "step.step_adding_a_security_admini_08067": "Click
Add to Security Group. ", "step.step_adding_a_security_admini_04B14": "Select one or more security groups, and click Add.", "step.step_adding_a_security_admini_04695": "Click OK.", "content.p_adding_a_security_admini_09175": "The result is the same: the security administrator becomes a member of the selected security groups and inherits all role assignments granted to those groups.", "desc": [ "content.p_adding_a_security_admini_00513", { "steps.ul_adding_a_security_admini_01EC8": [ "step.step_adding_a_security_admini_06A25", "step.step_adding_a_security_admini_0BB5D", "step.step_adding_a_security_admini_0C3B9" ] }, "content.p_adding_a_security_admini_0217C", "content.p_adding_a_security_admini_062B2", { "steps.ul_adding_a_security_admini_020EE": [ "step.step_adding_a_security_admini_0A9CF", "step.step_adding_a_security_admini_02618" ] }, "content.p_adding_a_security_admini_0346F", { "steps.steps_adding_a_security_admini_01EE1": [ "step.step_adding_a_security_admini_0A78F", "step.step_adding_a_security_admini_072C1", "step.step_adding_a_security_admini_0EE47", "step.step_adding_a_security_admini_0FD13", "content.p_adding_a_security_admini_041D2", "step.step_adding_a_security_admini_065AA", "step.step_adding_a_security_admini_0D7D3", "content.p_adding_a_security_admini_0EB92", "content.note_adding_a_security_admini_0420A", "step.step_adding_a_security_admini_0D3B5" ] }, "content.p_adding_a_security_admini_0DF3E", "content.title_adding_a_security_admini_0CE1B", "content.p_adding_a_security_admini_0A14A", { "steps.ol_adding_a_security_admini_0FBBB": [ "step.step_adding_a_security_admini_05B92", "step.step_adding_a_security_admini_04B00", "step.step_adding_a_security_admini_0363C", "step.step_adding_a_security_admini_08067", "step.step_adding_a_security_admini_04B14", "step.step_adding_a_security_admini_04695" ] }, "content.p_adding_a_security_admini_09175" ], "related": [ "limitations-latest-en" ] }, "removing_a_security_administrator_from_a_security_group_manually-latest-en.json": { "title": "title_removing_a_security_admi_05FFC", "title_removing_a_security_admi_05FFC": "Remove a security administrator from a security group manually", "shortdesc": "shortdesc_removing_a_security_admi_02284", "shortdesc_removing_a_security_admi_02284": "Remove a security administrator from a locally-managed security group to revoke the role assignments the administrator inherited through that group.", "content.p_removing_a_security_admi_03450": "Before you start, make sure you have:", "step.step_removing_a_security_admi_08E75": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "step.step_removing_a_security_admi_08416": "The organization where the security group belongs selected in the Scope Selector.", "content.p_removing_a_security_admi_00C13": "This procedure applies to security groups that were created locally in Elements. Provisioned security groups are managed exclusively in Entra ID, so members cannot be removed from them in the portal.", "step.step_removing_a_security_admi_0B6EA": "Select the organization in Scope Selector.", "step.step_removing_a_security_admi_08911": "Go to Access Control > Security Groups.", "step.step_removing_a_security_admi_052F5": "Click the security group name to open its details.", "step.step_removing_a_security_admi_006E5": "Open the Members tab.", "step.step_removing_a_security_admi_03C6B": "Select the checkbox next to the security administrator, and remove them from the group.", "step.step_removing_a_security_admi_0CAD6": "Confirm the removal.", "content.p_removing_a_security_admi_0F132": "The security administrator is removed from the security group and loses all role assignments inherited through that group. The administrator retains membership in any other security groups and any direct role assignments.", "desc": [ "content.p_removing_a_security_admi_03450", { "steps.ul_removing_a_security_admi_0DCA2": [ "step.step_removing_a_security_admi_08E75", "step.step_removing_a_security_admi_08416" ] }, "content.p_removing_a_security_admi_00C13", { "steps.steps_removing_a_security_admi_0F92D": [ "step.step_removing_a_security_admi_0B6EA", "step.step_removing_a_security_admi_08911", "step.step_removing_a_security_admi_052F5", "step.step_removing_a_security_admi_006E5", "step.step_removing_a_security_admi_03C6B", "step.step_removing_a_security_admi_0CAD6" ] }, "content.p_removing_a_security_admi_0F132" ] }, "removing_a_security_administrator_from_an_organization-latest-en.json": { "title": "title_removing_a_security_admi_08279", "title_removing_a_security_admi_08279": "Remove a security administrator from an organization", "shortdesc": "shortdesc_removing_a_security_admi_08560", "shortdesc_removing_a_security_admi_08560": "Remove a security administrator from an organization to revoke their membership and all access granted through that organization.", "content.p_removing_a_security_admi_0867A": "Before you start, make sure you have:", "step.step_removing_a_security_admi_065E7": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "step.step_removing_a_security_admi_035F3": "The organization selected in the Scope Selector.", "step.step_removing_a_security_admi_05673": "The security administrator must belong to an organization you manage.", "step.step_removing_a_security_admi_013BA": "Navigate to Access Control > Security Administrators .", "step.step_removing_a_security_admi_06E9C": "Locate the security administrator in the table, and select the checkbox next to their entry.", "step.step_removing_a_security_admi_0A8B5": "Click Remove from Organization button.", "step.step_removing_a_security_admi_050BA": "Confirm the removal.", "content.p_removing_a_security_admi_03FEB": "The security administrator is removed from this organization's membership, from all security groups in this organization, and from all direct role assignments granted through this organization. The organization no longer appears in the security administrator's Scope Selector.", "content.p_removing_a_security_admi_09782": "For local accounts, memberships in other organizations are not affected. The account may still exist in Elements, and the security administrator can still log in if they are a member of other organizations.", "desc": [ "content.p_removing_a_security_admi_0867A", { "steps.ul_removing_a_security_admi_09C6E": [ "step.step_removing_a_security_admi_065E7", "step.step_removing_a_security_admi_035F3", "step.step_removing_a_security_admi_05673" ] }, { "steps.steps_removing_a_security_admi_048B9": [ "step.step_removing_a_security_admi_013BA", "step.step_removing_a_security_admi_06E9C", "step.step_removing_a_security_admi_0A8B5", "step.step_removing_a_security_admi_050BA" ] }, "content.p_removing_a_security_admi_03FEB", "content.p_removing_a_security_admi_09782" ] }, "removing_a_federated_security_administrator_from_all_organizations-latest-en.json": { "title": "title_removing_a_federated_sec_0BE52", "title_removing_a_federated_sec_0BE52": "Remove a federated security administrator from all organizations (Hard Delete)", "shortdesc": "shortdesc_removing_a_federated_sec_00AB3", "shortdesc_removing_a_federated_sec_00AB3": "Permanently remove a federated security administrator account from all Elements organizations, including those outside your visibility.", "content.p_removing_a_federated_sec_0275C": "Before you start, make sure you have:", "step.step_removing_a_federated_sec_09339": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "step.step_removing_a_federated_sec_0907E": "A federated security administrator account for an email domain that uses single sign-on (SSO) Federation.", "content.p_removing_a_federated_sec_0478B": "For federated accounts, an Identity and Access Management (IAM) administrator can permanently delete the account. This removes the security administrator from every organization in Elements, including organizations that the administrator cannot see. Only federated accounts support this option.", "step.step_removing_a_federated_sec_0E70D": "Go to Access Control > Security Administrators.", "step.step_removing_a_federated_sec_0AFC6": "In the table, find the federated security administrator and select the checkbox next to their entry.", "step.step_removing_a_federated_sec_03DA9": "Click Remove from All Organizations.", "step.step_removing_a_federated_sec_02A9E": "Confirm the hard deletion.", "content.p_removing_a_federated_sec_0F0C0": "The account is removed from Elements and every organization it belonged to, including those outside your visibility.", "desc": [ "content.p_removing_a_federated_sec_0275C", { "steps.ul_removing_a_federated_sec_0EC76": [ "step.step_removing_a_federated_sec_09339", "step.step_removing_a_federated_sec_0907E" ] }, "content.p_removing_a_federated_sec_0478B", { "steps.steps_removing_a_federated_sec_0D2E8": [ "step.step_removing_a_federated_sec_0E70D", "step.step_removing_a_federated_sec_0AFC6", "step.step_removing_a_federated_sec_03DA9", "step.step_removing_a_federated_sec_02A9E" ] }, "content.p_removing_a_federated_sec_0F0C0" ] }, "managing_through_entra_id-latest-en.json": { "title": "title_managing_through_entra_i_04EDB", "title_managing_through_entra_i_04EDB": "Managing through Entra ID", "shortdesc": "shortdesc_managing_through_entra_i_0F60F", "shortdesc_managing_through_entra_i_0F60F": "Delegate security administrator management to Microsoft Entra ID, where you can add, update, and remove administrators in one place.", "content.p_managing_through_entra_i_063B6": "When you integrate Elements with Microsoft Entra ID, security administrators are created from your Entra ID tenant. Accounts and security group memberships synchronize automatically. Disabling or deleting a user in Entra ID also removes their access to Elements. The related topics describe daily tasks and limitations for Entra ID-managed security administrators.", "desc": [ "content.p_managing_through_entra_i_063B6" ] }, "managing_security_administrators_with_entra_id-latest-en.json": { "title": "title_managing_security_admini_08661", "title_managing_security_admini_08661": "Managing Security Administrators with Entra ID", "shortdesc": "shortdesc_managing_security_admini_00B40", "shortdesc_managing_security_admini_00B40": "When Entra ID provisioning is configured, security administrator management happens primarily in Microsoft Entra ID, and Elements automatically reflects the changes.", "content.p_managing_security_admini_01107": "The recommended workflow for Entra-managed organizations is:", "step.step_managing_security_admini_01A03": "In Entra ID, add or remove users, and add or remove their membership in Entra security groups.", "step.step_managing_security_admini_07E4F": "In Elements, define role assignments for the provisioned security groups. This is one-time setup, not a day-to-day operation.", "content.p_managing_security_admini_06207": "Once role assignments are defined for provisioned groups, no day-to-day operations are needed in the Elements portal. Changes in Entra take effect in Elements within minutes, typically.", "content.p_managing_security_admini_00339": "Entra ID also distinguishes between temporary and permanent removal:", "content.dt_managing_security_admini_0C0ED": "Deactivation", "content.dd_managing_security_admini_050D4": "The account is disabled in Entra ID. The security administrator cannot authenticate, but the account can be reactivated later. Use deactivation for leaves of absence, suspended employees, or investigation periods.", "content.dt_managing_security_admini_06133": "Deletion", "content.dd_managing_security_admini_074CB": "The account is deleted in Entra ID and is eventually removed from Elements. Deletion is difficult to reverse. Use deletion for terminated employees or accounts that are no longer needed.", "desc": [ "content.p_managing_security_admini_01107", { "steps.ul_managing_security_admini_058F8": [ "step.step_managing_security_admini_01A03", "step.step_managing_security_admini_07E4F" ] }, "content.p_managing_security_admini_06207", "content.p_managing_security_admini_00339", { "dl.dl_managing_security_admini_03F35": [ { "dlentry.dlentry_managing_security_admini_06092": [ "content.dt_managing_security_admini_0C0ED", "content.dd_managing_security_admini_050D4" ] }, { "dlentry.dlentry_managing_security_admini_0073F": [ "content.dt_managing_security_admini_06133", "content.dd_managing_security_admini_074CB" ] } ] } ] }, "adding_a_security_administrator_through_entra_id-latest-en.json": { "title": "title_adding_a_security_admini_0AC26", "title_adding_a_security_admini_0AC26": "Add a security administrator through Entra ID", "shortdesc": "shortdesc_adding_a_security_admini_0E4BB", "shortdesc_adding_a_security_admini_0E4BB": "Onboard a new security administrator by creating or activating the user account in Microsoft Entra ID and placing it in a provisioned security group.", "content.p_adding_a_security_admini_0B9DF": "Before you start, make sure you have:", "step.step_adding_a_security_admini_0003A": "System for Cross-domain Identity Management (SCIM) provisioning configured between Microsoft Entra ID and Elements.", "step.step_adding_a_security_admini_03393": "Permissions in Entra ID to manage user accounts and security group memberships.", "step.step_adding_a_security_admini_0BEC0": "Role assignments already defined in Elements for the provisioned security groups the user will join.", "content.p_adding_a_security_admini_01AEF": "In Entra-managed organizations, day-to-day onboarding happens in Entra ID, and Elements automatically reflects the change. No action is needed in the Elements portal.", "step.step_adding_a_security_admini_0D8D7": "In Entra ID, create or activate the user account.", "step.step_adding_a_security_admini_0F17E": "Add the user to one or more security groups that are provisioned to Elements.", "content.p_adding_a_security_admini_0CDFA": "Entra ID syncs the change to Elements, typically within minutes. The user appears in Elements as a provisioned security administrator, becomes a member of the selected provisioned security groups, and inherits all role assignments defined for those groups.", "desc": [ "content.p_adding_a_security_admini_0B9DF", { "steps.ul_adding_a_security_admini_01560": [ "step.step_adding_a_security_admini_0003A", "step.step_adding_a_security_admini_03393", "step.step_adding_a_security_admini_0BEC0" ] }, "content.p_adding_a_security_admini_01AEF", { "steps.steps_adding_a_security_admini_079A0": [ "step.step_adding_a_security_admini_0D8D7", "step.step_adding_a_security_admini_0F17E" ] }, "content.p_adding_a_security_admini_0CDFA" ] }, "deactivating_a_security_administrator_through_entra_id-latest-en.json": { "title": "title_deactivating_a_security__05284", "title_deactivating_a_security__05284": "Deactivate a security administrator through Entra ID", "shortdesc": "shortdesc_deactivating_a_security__07D0B", "shortdesc_deactivating_a_security__07D0B": "Disable a security administrator account temporarily by deactivating it in Microsoft Entra ID, so that the administrator cannot authenticate but the account can be reactivated later.", "content.p_deactivating_a_security__0C7B2": "Before you start, make sure you have:", "step.step_deactivating_a_security__06ECF": "System for Cross-domain Identity Management (SCIM) provisioning configured between Microsoft Entra ID and Elements.", "step.step_deactivating_a_security__04714": "Permissions in Entra ID to disable the user account.", "content.p_deactivating_a_security__077CB": "Deactivation is the temporary equivalent of removal. Use deactivation for leaves of absence, suspended employees, or investigation periods. To remove the account permanently, delete it in Entra ID instead.", "step.step_deactivating_a_security__0A117": "In Entra ID, open the user account.", "step.step_deactivating_a_security__03D1D": "Disable the account.", "content.p_deactivating_a_security__0FDBA": "The account is deactivated in Elements. The security administrator cannot log in. The account retains its memberships and role assignments so that it can be reactivated later.", "desc": [ "content.p_deactivating_a_security__0C7B2", { "steps.ul_deactivating_a_security__0911D": [ "step.step_deactivating_a_security__06ECF", "step.step_deactivating_a_security__04714" ] }, "content.p_deactivating_a_security__077CB", { "steps.steps_deactivating_a_security__0DF02": [ "step.step_deactivating_a_security__0A117", "step.step_deactivating_a_security__03D1D" ] }, "content.p_deactivating_a_security__0FDBA" ] }, "deleting_a_security_administrator_through_entra_id-latest-en.json": { "title": "title_deleting_a_security_admi_0393F", "title_deleting_a_security_admi_0393F": "Delete a security administrator through Entra ID", "shortdesc": "shortdesc_deleting_a_security_admi_0560B", "shortdesc_deleting_a_security_admi_0560B": "Remove a security administrator account permanently by deleting it in Microsoft Entra ID, so that the account is eventually removed from all organizations in Elements.", "content.p_deleting_a_security_admi_0ADB6": "Before you start, make sure you have:", "step.step_deleting_a_security_admi_07E16": "System for Cross-domain Identity Management (SCIM) provisioning configured between Microsoft Entra ID and Elements.", "step.step_deleting_a_security_admi_062A8": "Permissions in Entra ID to delete the user account.", "content.p_deleting_a_security_admi_07F3F": "Deletion is the permanent equivalent of removal. Use deletion for terminated employees or accounts that are no longer needed. Deletion is difficult to reverse. For a temporary removal, deactivate the account instead.", "step.step_deleting_a_security_admi_0A74E": "In Entra ID, open the user account.", "step.step_deleting_a_security_admi_0E65F": "Delete the account.", "content.p_deleting_a_security_admi_08DC7": "Entra ID first deactivates the account in Elements, and the account is eventually removed from all organizations. All security group memberships and role assignments are removed. The account no longer exists in Elements.", "desc": [ "content.p_deleting_a_security_admi_0ADB6", { "steps.ul_deleting_a_security_admi_09252": [ "step.step_deleting_a_security_admi_07E16", "step.step_deleting_a_security_admi_062A8" ] }, "content.p_deleting_a_security_admi_07F3F", { "steps.steps_deleting_a_security_admi_0034F": [ "step.step_deleting_a_security_admi_0A74E", "step.step_deleting_a_security_admi_0E65F" ] }, "content.p_deleting_a_security_admi_08DC7" ] }, "removing_a_security_administrator_from_a_security_group_thouygh_entra_id-latest-en.json": { "title": "title_removing_a_security_admi_069DC", "title_removing_a_security_admi_069DC": "Remove a security administrator from a security group through Entra ID", "shortdesc": "shortdesc_removing_a_security_admi_07653", "shortdesc_removing_a_security_admi_07653": "Revoke role assignments inherited through a provisioned security group by removing the security administrator from the corresponding Entra security group.", "content.p_removing_a_security_admi_0F7A6": "Before you start, make sure you have:", "step.step_removing_a_security_admi_09252": "System for Cross-domain Identity Management (SCIM) provisioning configured between Microsoft Entra ID and Elements.", "step.step_removing_a_security_admi_06F65": "Permissions in Entra ID to manage the relevant security group.", "content.p_removing_a_security_admi_00F29": "For provisioned security groups, membership is managed exclusively in Entra ID. Use this procedure when you need to revoke only the access that comes through one specific group, without affecting other groups or direct role assignments.", "step.step_removing_a_security_admi_0DD10": "In Entra ID, open the relevant security group.", "step.step_removing_a_security_admi_0B833": "Remove the user from the group.", "content.p_removing_a_security_admi_0287C": "Entra ID syncs the change to Elements, typically within minutes. The security administrator is removed from the corresponding provisioned group in Elements and loses the role assignments inherited through that group. The administrator retains membership in any other groups and any direct role assignments.", "desc": [ "content.p_removing_a_security_admi_0F7A6", { "steps.ul_removing_a_security_admi_0752B": [ "step.step_removing_a_security_admi_09252", "step.step_removing_a_security_admi_06F65" ] }, "content.p_removing_a_security_admi_00F29", { "steps.steps_removing_a_security_admi_0C75B": [ "step.step_removing_a_security_admi_0DD10", "step.step_removing_a_security_admi_0B833" ] }, "content.p_removing_a_security_admi_0287C" ] }, "user_limitations-latest-en.json": { "title": "title_user_limitations_000001_D3FB00", "title_user_limitations_000001_D3FB00": "Security administrator limitations", "shortdesc": "shortdesc_user_limitations_000002_E9AA3D", "shortdesc_user_limitations_000002_E9AA3D": "Several constraints affect how security administrator accounts behave in Elements RBAC.", "content.p_user_limitations_000010_D473A4": "Plan security administrator management with the following constraints in mind:", "content.dt_user_limitations_000013_E2992A": "The e-mail address is the account identity", "content.dd_user_limitations_000014_8A8429": "Elements identifies each security administrator by e-mail address. The same e-mail address always refers to the same account across the entire Elements system, and two different accounts cannot share an e-mail address. When SSO Federation is configured, the e-mail domain also determines whether the account is federated.", "content.dt_user_limitations_000017_CC1F9F": "Removing a security administrator is scoped to one organization", "content.dd_user_limitations_000018_0F093D": "", "content.dd_p_user_limitations_000019_593735": "Removing a security administrator from an organization affects only that organization:
", "choice.choice_user_limitations_00001B_80BEC0": "The user no longer appears in the organization's security administrators list.", "choice.choice_user_limitations_00001D_A2C931": "All role assignments granted through that organization are removed.", "choice.choice_user_limitations_00001F_CFE435": "The user is removed from all security groups in that organization.", "choice.choice_user_limitations_000021_66EBB2": "The user's membership in other organizations is not affected.", "content.dd_p_user_limitations_000023_C18071": "Federated accounts can also be hard-deleted from the entire Elements system.
", "content.dt_user_limitations_000025_0C864D": "Cross-tenant invitations are restricted", "content.dd_user_limitations_000026_5C3EBE": "Elements enforces cross-tenant access policies to prevent phishing through invitations. An organization cannot invite a security administrator from an unrelated organization without explicit consent. This protects users from malicious organizations that would otherwise be able to invite them to fake organizations to capture their accounts.", "content.dt_user_limitations_000029_3B5142": "Provisioned security administrators are immutable", "content.dd_user_limitations_00002A_149538": "", "content.dd_p_user_limitations_00002B_F92C47": "A security administrator synchronized from Entra ID through System for Cross-domain Identity Management (SCIM) provisioning cannot be edited or deleted in the Elements portal. All account changes must be made in Entra ID:
", "choice.choice_user_limitations_00002D_7AD5B5": "Account details are managed in Entra ID.", "choice.choice_user_limitations_00002F_2EB876": "Security group membership is managed in Entra ID.", "choice.choice_user_limitations_000031_7805F3": "Removing the user requires removing them from Entra ID, or from the provisioning scope.", "content.dd_p_user_limitations_000033_E23D47": "Provisioned security administrators are marked as Provisioned in the Elements security administrators list.
", "desc": [ "content.p_user_limitations_000010_D473A4", { "dl.dl_user_limitations_000011_DD9A06": [ { "dlentry.dlentry_user_limitations_000012_E7468C": [ "content.dt_user_limitations_000013_E2992A", "content.dd_user_limitations_000014_8A8429" ] }, { "dlentry.dlentry_user_limitations_000016_376A59": [ "content.dt_user_limitations_000017_CC1F9F", "content.dd_user_limitations_000018_0F093D", "content.dd_p_user_limitations_000019_593735", { "choices.ul_user_limitations_00001A_FEF297": [ "choice.choice_user_limitations_00001B_80BEC0", "choice.choice_user_limitations_00001D_A2C931", "choice.choice_user_limitations_00001F_CFE435", "choice.choice_user_limitations_000021_66EBB2" ] }, "content.dd_p_user_limitations_000023_C18071" ] }, { "dlentry.dlentry_user_limitations_000024_3DA3AF": [ "content.dt_user_limitations_000025_0C864D", "content.dd_user_limitations_000026_5C3EBE" ] }, { "dlentry.dlentry_user_limitations_000028_FA2BE5": [ "content.dt_user_limitations_000029_3B5142", "content.dd_user_limitations_00002A_149538", "content.dd_p_user_limitations_00002B_F92C47", { "choices.ul_user_limitations_00002C_41EA10": [ "choice.choice_user_limitations_00002D_7AD5B5", "choice.choice_user_limitations_00002F_2EB876", "choice.choice_user_limitations_000031_7805F3" ] }, "content.dd_p_user_limitations_000033_E23D47" ] } ] } ], "related": [ "removing_a_federated_security_administrator_from_all_organizations-latest-en", "cross_tenant_access_policies-latest-en" ] }, "managing_security_groups-latest-en.json": { "title": "title_managing_security_groups_05776", "title_managing_security_groups_05776": "Managing security groups", "shortdesc": "shortdesc_managing_security_groups_078F1", "shortdesc_managing_security_groups_078F1": "Security groups bundle role assignments to grant the same permissions to several security administrators at once.", "content.p_managing_security_groups_0512B": "Create security groups in Elements for teams that need shared access, and delete groups when the team they represent no longer exists. Groups provisioned from Microsoft Entra ID are managed in your tenant, not here.", "desc": [ "content.p_managing_security_groups_0512B" ] }, "creating_security_groups-latest-en.json": { "title": "title_creating_security_groups_00E23", "title_creating_security_groups_00E23": "Create a security group manually", "shortdesc": "shortdesc_creating_security_groups_08CD8", "shortdesc_creating_security_groups_08CD8": "Create a security group manually in Elements to group security administrators who share the same permissions.", "content.p_creating_security_groups_07885": "Before you start, make sure you have:", "step.step_creating_security_groups_05F9E": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "step.step_creating_security_groups_0BAC3": "RBAC enabled.", "step.step_creating_security_groups_00F32": "The appropriate organization selected in the Scope Selector.", "content.p_creating_security_groups_0436D": "Manual security groups are created and managed entirely within Elements. The Security Group creation wizard guides you through defining the group's name, description, role assignments, and initial members.", "step.step_creating_security_groups_0B68B": "Go to Access Control > Security Groups.", "step.step_creating_security_groups_0AADA": "Click Create Security Group.", "content.p_creating_security_groups_05FE6": "", "step.step_creating_security_groups_062C1": "On the Details page, enter a unique group name, optionally add a description, and click Next.", "content.p_creating_security_groups_0B81F": "For partner organizations, also select one or more organizations as the role scope. Role assignments at this stage are optional and can be configured later.", "step.step_creating_security_groups_02FCE": "On the Role Assignments page, select one or more roles to assign to the group, click Add to preview the assignments, and click Next.", "content.p_creating_security_groups_0C034": "Members at this stage are optional and can be added later.", "step.step_creating_security_groups_0D2B8": "On the Members page, search for and select existing security administrators, click Add, and click Next.", "step.step_creating_security_groups_075C6": "On the Summary page, review the configuration, and click Finish.", "content.p_creating_security_groups_0E6F5": "The security group is created and ready for use.", "desc": [ "content.p_creating_security_groups_07885", { "steps.ul_creating_security_groups_0C285": [ "step.step_creating_security_groups_05F9E", "step.step_creating_security_groups_0BAC3", "step.step_creating_security_groups_00F32" ] }, "content.p_creating_security_groups_0436D", { "steps.steps_creating_security_groups_0E9F4": [ "step.step_creating_security_groups_0B68B", "step.step_creating_security_groups_0AADA", "step.step_creating_security_groups_062C1", "content.p_creating_security_groups_05FE6", "step.step_creating_security_groups_02FCE", "content.p_creating_security_groups_0B81F", "step.step_creating_security_groups_0D2B8", "content.p_creating_security_groups_0C034", "step.step_creating_security_groups_075C6" ] }, "content.p_creating_security_groups_0E6F5" ] }, "deleting_security_group-latest-en.json": { "title": "title_deleting_security_group_0093A5", "title_deleting_security_group_0093A5": "Delete a security group", "shortdesc": "shortdesc_deleting_security_group_00C3B4", "shortdesc_deleting_security_group_00C3B4": "Delete a locally created security group from Elements when it is no longer needed.", "content.p_deleting_security_group_0053F5": "Before you start, make sure you have:", "step.step_deleting_security_group_00F2AB": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "step.step_deleting_security_group_00F13D": "The organization where the security group belongs selected in the Scope Selector.", "content.p_deleting_security_group_00C7D9": "Only locally created security groups can be deleted. Provisioned security groups are immutable in Elements and cannot be deleted through the portal.", "step.step_deleting_security_group_00B4AF": "Go to Access Control > Security Groups.", "content.p_deleting_security_group_004AC6": "", "step.step_deleting_security_group_004202": "Locate the security group, click the three-dot menu next to its name, and select Delete.", "step.step_deleting_security_group_004842": "Confirm the deletion.", "content.p_deleting_security_group_003DC6": "The security group is deleted, and all of its role assignments are removed. Security administrators who were members of the group remain in the system but lose the permissions they inherited through the group.", "desc": [ "content.p_deleting_security_group_0053F5", { "steps.ul_deleting_security_group_00A86A": [ "step.step_deleting_security_group_00F2AB", "step.step_deleting_security_group_00F13D" ] }, "content.p_deleting_security_group_00C7D9", { "steps.steps_deleting_security_group_00C4E1": [ "step.step_deleting_security_group_00B4AF", "step.step_deleting_security_group_004202", "content.p_deleting_security_group_004AC6", "step.step_deleting_security_group_004842" ] }, "content.p_deleting_security_group_003DC6" ] }, "managing_role_assignments-latest-en.json": { "title": "title_managing_role_assignment_0CB53", "title_managing_role_assignment_0CB53": "Managing role assignments", "shortdesc": "shortdesc_managing_role_assignment_0715D", "shortdesc_managing_role_assignment_0715D": "Role assignments connect a subject (a security administrator or security group) to a role and a resource (an organization).", "content.p_managing_role_assignment_05B0E": "Role assignments let you grant access, inspect existing access, use inheritance to avoid duplicate assignments, and revoke access when it is no longer needed. The same role assignment is visible from both the member view and the organization view, and the procedures cover both entry points.", "desc": [ "content.p_managing_role_assignment_05B0E" ] }, "granting_access-latest-en.json": { "title": "title_granting_access_000001_7428AD6", "title_granting_access_000001_7428AD6": "Granting access", "shortdesc": "shortdesc_granting_access_000002_C76DB3D", "shortdesc_granting_access_000002_C76DB3D": "Create role assignments either from the member's view or from the organization's view.", "content.p_granting_access_000010_B0100B1": "Assign roles to a security group when several security administrators need the same permissions (the recommended approach), or directly to a single security administrator for special cases such as the root user. The organization view is useful when you want to see and adjust everyone who has access to a specific organization.", "desc": [ "content.p_granting_access_000010_B0100B1" ] }, "assigning_roles_to_security_groups_member_first_approach-latest-en.json": { "title": "title_assigning_roles_to_secur_0EF1B", "title_assigning_roles_to_secur_0EF1B": "Assign roles to a security group (Indirect Assignment)", "shortdesc": "shortdesc_assigning_roles_to_secur_02A0A", "shortdesc_assigning_roles_to_secur_02A0A": "Assign one or more roles to a security group to grant the same set of permissions to all members of the group at once.", "content.p_assigning_roles_to_secur_09E91": "Before you start, make sure you have:", "step.step_assigning_roles_to_secur_0D7DB": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "step.step_assigning_roles_to_secur_0771C": "A security group already created.", "step.step_assigning_roles_to_secur_01C0D": "Knowledge of which organizations and roles you need to assign.", "content.p_assigning_roles_to_secur_058FB": "This approach starts with the security group and defines where and what permissions the group has. It is the recommended approach for defining permission profiles for teams.", "step.step_assigning_roles_to_secur_034A8": "Select the organization where the security group belongs in the Scope Selector.", "step.step_assigning_roles_to_secur_0125F": "Go to Access Control > Security Groups, and click the security group name.", "content.p_assigning_roles_to_secur_027E6": "", "content.p_assigning_roles_to_secur_0189F": "The tab shows existing role assignments for the group. Inherited assignments (assignments made at a parent organization) appear here too but cannot be removed at this level.", "step.step_assigning_roles_to_secur_01D65": "Open the Role Assignments tab.", "step.step_assigning_roles_to_secur_096DD": "Click Assign Role.", "content.p_assigning_roles_to_secur_04974": "For partner organizations, choose from the Solution Provider, Service Partners, or companies. Untick
Include companies to list only Service Partners for a simpler view. Each selected organization defines where the permissions will apply.", "step.step_assigning_roles_to_secur_0744D": "Select one or more organizations to define the role scope.", "content.p_assigning_roles_to_secur_0D691": "Use the Include detailed permissions checkbox to see granular feature-specific roles in addition to the standard roles.", "step.step_assigning_roles_to_secur_00613": "Select one or more roles to assign.", "content.p_assigning_roles_to_secur_028AF": "The number of role assignments created is the number of selected organizations multiplied by the number of selected roles. Selecting 3 organizations and 2 roles, for example, creates 6 role assignments.", "step.step_assigning_roles_to_secur_0E413": "Click Add to stage the assignments, and review them on the right side of the flyout.", "step.step_assigning_roles_to_secur_0424A": "Click OK to confirm.", "content.p_assigning_roles_to_secur_0937D": "The role assignments are created immediately. All members of the security group receive the assigned permissions. Revocation changes are effective within one minute. Members may need to log out and log in again to use some of the newly granted roles.", "desc": [ "content.p_assigning_roles_to_secur_09E91", { "steps.ul_assigning_roles_to_secur_061D4": [ "step.step_assigning_roles_to_secur_0D7DB", "step.step_assigning_roles_to_secur_0771C", "step.step_assigning_roles_to_secur_01C0D" ] }, "content.p_assigning_roles_to_secur_058FB", { "steps.steps_assigning_roles_to_secur_0A06E": [ "step.step_assigning_roles_to_secur_034A8", "step.step_assigning_roles_to_secur_0125F", "step.step_assigning_roles_to_secur_01D65", "content.p_assigning_roles_to_secur_027E6", "content.p_assigning_roles_to_secur_0189F", "step.step_assigning_roles_to_secur_096DD", "step.step_assigning_roles_to_secur_0744D", "content.p_assigning_roles_to_secur_04974", "step.step_assigning_roles_to_secur_00613", "content.p_assigning_roles_to_secur_0D691", "step.step_assigning_roles_to_secur_0E413", "content.p_assigning_roles_to_secur_028AF", "step.step_assigning_roles_to_secur_0424A" ] }, "content.p_assigning_roles_to_secur_0937D" ] }, "assigning_roles_to_users_direct_assignment-latest-en.json": { "title": "title_assigning_roles_to_users_0B257", "title_assigning_roles_to_users_0B257": "Assign roles directly to a security administrator", "shortdesc": "shortdesc_assigning_roles_to_users_0287A", "shortdesc_assigning_roles_to_users_0287A": "Grant permissions to a single security administrator by assigning roles directly to the administrator's account, without using a security group.", "content.p_assigning_roles_to_users_01680": "Before you start, make sure you have:", "step.step_assigning_roles_to_users_0C056": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "step.step_assigning_roles_to_users_061B2": "The organization where the security administrator belongs selected in the Scope Selector.", "step.step_assigning_roles_to_users_0C21F": "Knowledge of which organizations and roles you need to assign.", "content.note_assigning_roles_to_users_0BCEA": "Important: Direct role assignments are discouraged except for special cases: root user accounts (to prevent lockout), temporary elevated access for a specific administrator, or exception cases where group membership is not appropriate. For all other cases, use security groups for scalability and maintainability.", "step.step_assigning_roles_to_users_065F1": "Go to Access Control > Security Administrators.", "step.step_assigning_roles_to_users_07E78": "Click the security administrator's email address to open the administrator details.", "content.p_assigning_roles_to_users_09625": "The tab shows the administrator's existing role assignments. Indirect assignments (received through security group membership) and inherited assignments (from a parent organization) also appear here, but they cannot be removed from this view.
", "step.step_assigning_roles_to_users_076D6": "Open the Role Assignments tab.", "step.step_assigning_roles_to_users_0FDA1": "Click Assign Role.", "content.p_assigning_roles_to_users_0B2AF": "For partner organizations, choose from the Solution Provider, Service Partners, or companies. Untick Include companies to list only Service Partners for a simpler view. Each selected organization defines where the permissions will apply.", "step.step_assigning_roles_to_users_0E97D": "Select one or more organizations to define the role scope.", "content.p_assigning_roles_to_users_0E964": "Use the Include detailed permissions checkbox to see granular feature-specific roles in addition to the standard roles.", "step.step_assigning_roles_to_users_07336": "Select one or more roles to assign.", "content.p_assigning_roles_to_users_0D017": "The number of role assignments created is the number of selected organizations multiplied by the number of selected roles.", "step.step_assigning_roles_to_users_010DD": "Click Add to stage the assignments, and review them on the right side of the flyout.", "step.step_assigning_roles_to_users_05FEC": "Click OK to confirm.", "content.p_assigning_roles_to_users_0B0B5": "The role assignments are created immediately and grant the selected permissions to the security administrator. Revocation changes are effective within one minute. The administrator may need to log out and log in again to use some of the newly granted roles.", "content.note_assigning_roles_to_users_06CB2": "Tip: If you repeatedly assign the same roles directly to multiple security administrators, create a security group instead and assign the roles to the group once.", "desc": [ "content.p_assigning_roles_to_users_01680", { "steps.ul_assigning_roles_to_users_0308E": [ "step.step_assigning_roles_to_users_0C056", "step.step_assigning_roles_to_users_061B2", "step.step_assigning_roles_to_users_0C21F" ] }, "content.note_assigning_roles_to_users_0BCEA", { "steps.steps_assigning_roles_to_users_0F9DF": [ "step.step_assigning_roles_to_users_065F1", "step.step_assigning_roles_to_users_07E78", "step.step_assigning_roles_to_users_076D6", "content.p_assigning_roles_to_users_09625", "step.step_assigning_roles_to_users_0FDA1", "step.step_assigning_roles_to_users_0E97D", "content.p_assigning_roles_to_users_0B2AF", "step.step_assigning_roles_to_users_07336", "content.p_assigning_roles_to_users_0E964", "step.step_assigning_roles_to_users_010DD", "content.p_assigning_roles_to_users_0D017", "step.step_assigning_roles_to_users_05FEC" ] }, "content.p_assigning_roles_to_users_0B0B5", "content.note_assigning_roles_to_users_06CB2" ], "related": [ "constraints_gotchas-latest-en" ] }, "organization_first_approach-latest-en.json": { "title": "title_adding_access_from_the_o_00EC6", "title_adding_access_from_the_o_00EC6": "Add access from the organization view", "shortdesc": "shortdesc_adding_access_from_the_o_00B8F", "shortdesc_adding_access_from_the_o_00B8F": "Add access to an organization by selecting members and assigning them roles from the organization's Role Assignments tab.", "content.p_adding_access_from_the_o_0F846": "Before you start, make sure you have:", "step.step_adding_access_from_the_o_0D2C1": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "step.step_adding_access_from_the_o_038BB": "The target organization selected in the Scope Selector.", "content.p_adding_access_from_the_o_0ACA1": "This approach starts with the organization (the resource) and defines who has access to it. It is useful for reviewing and managing access to a specific organizational unit.", "step.step_adding_access_from_the_o_0FC86": "Select the target organization in the Scope Selector.", "content.p_adding_access_from_the_o_05FF8": "The tab lists all role assignments defined for this organization. Inherited assignments (those created at a parent organization) appear with an
inherited indicator and cannot be modified or removed from this view.", "step.step_adding_access_from_the_o_03E33": "Go to Access Control > Role Assignments.", "step.step_adding_access_from_the_o_08593": "Click Add Access.", "content.dt_adding_access_from_the_o_04F13": "Solution Provider", "content.dd_adding_access_from_the_o_0518D": "Select from top-level partner security administrators and groups. This is the recommended choice for partner staff.", "content.dt_adding_access_from_the_o_0FA4B": "Service Partner", "content.dd_adding_access_from_the_o_08452": "Select from Service Partner security administrators and groups. Use this when delegating IAM to a Service Partner.", "content.dt_adding_access_from_the_o_050AB": "Company", "content.dd_adding_access_from_the_o_024E8": "Select from company security administrators and groups. Use this when granting company access to a company administrator.", "content.p_adding_access_from_the_o_09C60": "For company organizations this step is skipped. The members come from the company organization implicitly.", "content.p_adding_access_from_the_o_0FC0F": "Three choices are available:", "step.step_adding_access_from_the_o_08E17": "For partner organizations, select the member organization type to choose where the members come from.", "content.p_adding_access_from_the_o_0FCA8": "Security groups appear at the top of the list and security administrators at the bottom. Both are valid subjects. We recommend selecting security groups rather than individual administrators.
", "step.step_adding_access_from_the_o_04765": "Search for and select one or more members.", "content.p_adding_access_from_the_o_0C853": "Select one or more roles to assign. Multiple roles can be assigned in one operation.
", "content.note_adding_access_from_the_o_0AD34": "Note: Selecting several members and several roles creates one assignment for each combination, which counts toward the role assignment limits.", "step.step_adding_access_from_the_o_052DE": "Select one or more roles from the role dropdown, and close the dropdown.", "content.p_adding_access_from_the_o_09D3F": "You can repeat the previous steps to stage assignments for additional members or roles before confirming.", "content.p_adding_access_from_the_o_0E732": "", "step.step_adding_access_from_the_o_0A36F": "Click Add to stage the assignments, and review them on the right side of the flyout.", "content.p_adding_access_from_the_o_07CAD": "", "step.step_adding_access_from_the_o_0DD00": "Click OK to confirm.", "content.p_adding_access_from_the_o_0A10B": "The role assignments are created and appear in the role assignments table. The new assignments show the organization type matching the selected organization (not inherited). The selected members now have access to the organization with the assigned roles.", "desc": [ "content.p_adding_access_from_the_o_0F846", { "steps.ul_adding_access_from_the_o_027DF": [ "step.step_adding_access_from_the_o_0D2C1", "step.step_adding_access_from_the_o_038BB" ] }, "content.p_adding_access_from_the_o_0ACA1", { "steps.steps_adding_access_from_the_o_0D6A3": [ "step.step_adding_access_from_the_o_0FC86", "step.step_adding_access_from_the_o_03E33", "content.p_adding_access_from_the_o_05FF8", "step.step_adding_access_from_the_o_08593", "step.step_adding_access_from_the_o_08E17", "content.p_adding_access_from_the_o_0FC0F", { "dl.dl_adding_access_from_the_o_0D9A7": [ { "dlentry.dlentry_adding_access_from_the_o_0B9E9": [ "content.dt_adding_access_from_the_o_04F13", "content.dd_adding_access_from_the_o_0518D" ] }, { "dlentry.dlentry_adding_access_from_the_o_06737": [ "content.dt_adding_access_from_the_o_0FA4B", "content.dd_adding_access_from_the_o_08452" ] }, { "dlentry.dlentry_adding_access_from_the_o_0D451": [ "content.dt_adding_access_from_the_o_050AB", "content.dd_adding_access_from_the_o_024E8" ] } ] }, "content.p_adding_access_from_the_o_09C60", "step.step_adding_access_from_the_o_04765", "content.p_adding_access_from_the_o_0FCA8", "step.step_adding_access_from_the_o_052DE", "content.p_adding_access_from_the_o_0C853", "content.note_adding_access_from_the_o_0AD34", "step.step_adding_access_from_the_o_0A36F", "content.p_adding_access_from_the_o_09D3F", "content.p_adding_access_from_the_o_0E732", "step.step_adding_access_from_the_o_0DD00", "content.p_adding_access_from_the_o_07CAD" ] }, "content.p_adding_access_from_the_o_0A10B" ], "related": [ "limitations-latest-en", "viewing_role_assignments_for_an_organization-latest-en" ] }, "inspecting_access-latest-en.json": { "title": "title_inspecting_access_000001_2F1A8", "title_inspecting_access_000001_2F1A8": "Inspecting access", "shortdesc": "shortdesc_inspecting_access_000002_DBA9E", "shortdesc_inspecting_access_000002_DBA9E": "Review the role assignments that apply to a security group, to an organization, or to an individual security administrator.", "content.p_inspecting_access_000010_79F63": "Use these procedures to audit access before a change, to investigate a permissions issue, or to verify that a new security administrator has the access they need.", "desc": [ "content.p_inspecting_access_000010_79F63" ] }, "viewing_role_assignments_for_a_security_group-latest-en.json": { "title": "title_viewing_role_assignments_04E01", "title_viewing_role_assignments_04E01": "View role assignments for a security group", "shortdesc": "shortdesc_viewing_role_assignments_0D993", "shortdesc_viewing_role_assignments_0D993": "View all role assignments granted to a security group, showing where the group has access and which roles its members inherit.", "content.p_viewing_role_assignments_0A117": "Before you start, make sure you have:", "step.step_viewing_role_assignments_0D3BC": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "content.p_viewing_role_assignments_0D473": "Use this procedure to audit a security group's permissions, plan changes to its access, understand the scope of its reach, or document the permission profile it represents.", "step.step_viewing_role_assignments_04200": "Select the organization where the security group belongs in the Scope Selector.", "step.step_viewing_role_assignments_0FBCA": "Go to Access Control > Security Groups.", "step.step_viewing_role_assignments_0D7E2": "Click the security group name to open its details.", "step.step_viewing_role_assignments_049C2": "Open the Role Assignments tab.", "content.p_viewing_role_assignments_09BFA": "The tab shows all role assignments for the security group, including the organizations where the group has access and the roles granted at each organization. All members of the security group inherit these assignments. Inherited assignments (those created at a parent organization) appear with an inherited indicator and cannot be modified here.", "desc": [ "content.p_viewing_role_assignments_0A117", { "steps.ul_viewing_role_assignments_0F131": [ "step.step_viewing_role_assignments_0D3BC" ] }, "content.p_viewing_role_assignments_0D473", { "steps.steps_viewing_role_assignments_024F7": [ "step.step_viewing_role_assignments_04200", "step.step_viewing_role_assignments_0FBCA", "step.step_viewing_role_assignments_0D7E2", "step.step_viewing_role_assignments_049C2" ] }, "content.p_viewing_role_assignments_09BFA" ] }, "viewing_role_assignments_for_an_organization-latest-en.json": { "title": "title_viewing_role_assignments_08B01", "title_viewing_role_assignments_08B01": "View role assignments for an organization", "shortdesc": "shortdesc_viewing_role_assignments_047DE", "shortdesc_viewing_role_assignments_047DE": "View all role assignments that grant access to a specific organization.", "content.p_viewing_role_assignments_0FEF5": "Before you start, make sure you have:", "step.step_viewing_role_assignments_03DD3": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "content.p_viewing_role_assignments_08E73": "Use this procedure to inspect or audit access defined for a specific organization, or to locate role assignments that you need to modify or remove.", "step.step_viewing_role_assignments_0E017": "Select the organization in the Scope Selector.", "step.step_viewing_role_assignments_0579E": "Go to Access Control > Role Assignments.", "content.p_viewing_role_assignments_08234": "The table shows all role assignments defined for the selected organization.", "content.dt_viewing_role_assignments_050F3": "Assigned To", "content.dd_viewing_role_assignments_00938": "The subject of the assignment: either a security group name or a security administrator's email address.", "content.dt_viewing_role_assignments_0B231": "Member Type", "content.dd_viewing_role_assignments_03AB9": "Security group or security administrator.", "content.dt_viewing_role_assignments_039B7": "Capability", "content.dd_viewing_role_assignments_0BEB1": "The feature area covered by the role.", "content.dt_viewing_role_assignments_0B98A": "Role", "content.dd_viewing_role_assignments_0727E": "The role name.", "content.dt_viewing_role_assignments_08314": "Organization Type", "content.dd_viewing_role_assignments_078D0": "Where the assignment was created. If the assignment is inherited from a parent organization, this column shows the parent organization type with an inherited indicator.", "content.p_viewing_role_assignments_0D6A6": "Assignments whose Organization Type matches the selected organization were created explicitly at this level and can be removed from this view. Inherited assignments cannot be removed here; they must be removed at the parent organization where they were originally created.", "content.note_viewing_role_assignments_0243F": "Note: This view does not expand security group membership. To see which security administrators belong to a security group, open the security group's details. To see the effective access of a specific administrator, use the Check Access feature.", "desc": [ "content.p_viewing_role_assignments_0FEF5", { "steps.ul_viewing_role_assignments_0290A": [ "step.step_viewing_role_assignments_03DD3" ] }, "content.p_viewing_role_assignments_08E73", { "steps.steps_viewing_role_assignments_0FBCD": [ "step.step_viewing_role_assignments_0E017", "step.step_viewing_role_assignments_0579E" ] }, "content.p_viewing_role_assignments_08234", { "dl.dl_viewing_role_assignments_03E39": [ { "dlentry.dlentry_viewing_role_assignments_09F76": [ "content.dt_viewing_role_assignments_050F3", "content.dd_viewing_role_assignments_00938" ] }, { "dlentry.dlentry_viewing_role_assignments_08154": [ "content.dt_viewing_role_assignments_0B231", "content.dd_viewing_role_assignments_03AB9" ] }, { "dlentry.dlentry_viewing_role_assignments_05502": [ "content.dt_viewing_role_assignments_039B7", "content.dd_viewing_role_assignments_0BEB1" ] }, { "dlentry.dlentry_viewing_role_assignments_06965": [ "content.dt_viewing_role_assignments_0B98A", "content.dd_viewing_role_assignments_0727E" ] }, { "dlentry.dlentry_viewing_role_assignments_018CA": [ "content.dt_viewing_role_assignments_08314", "content.dd_viewing_role_assignments_078D0" ] } ] }, "content.p_viewing_role_assignments_0D6A6", "content.note_viewing_role_assignments_0243F" ] }, "checking_effective_roles_for_a_user-latest-en.json": { "title": "title_checking_a_security_admi_0B37D", "title_checking_a_security_admi_0B37D": "Check a security administrator's effective access", "shortdesc": "shortdesc_checking_a_security_admi_0ACD8", "shortdesc_checking_a_security_admi_0ACD8": "View the complete effective access of a specific security administrator in a selected organization, combining direct, indirect, and inherited role assignments.", "content.p_checking_a_security_admi_0CFF3": "Before you start, make sure you have:", "step.step_checking_a_security_admi_077B3": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "content.p_checking_a_security_admi_0C747": "Use this procedure to verify a security administrator's access before or after making changes, to audit their permissions, to troubleshoot access issues, or to investigate security incidents.", "step.step_checking_a_security_admi_02C54": "Select the organization in the Scope Selector.", "step.step_checking_a_security_admi_032AA": "Go to Access Control > Role Assignments.", "content.p_checking_a_security_admi_0FAD5": "The Check Access link in the Role Assignments header allows inspecting specific user's effective permissions.", "content.p_checking_a_security_admi_0CFAB": "", "step.step_checking_a_security_admi_07C42": "Click Check Access in the header.", "content.p_checking_a_security_admi_005E0": "", "step.step_checking_a_security_admi_0D7E5": "Enter the security administrator's email address, and click Next.", "content.p_checking_a_security_admi_0ED3D": "The results page shows two tables:", "step.step_checking_a_security_admi_043F6": "The top table, Effective Role Assignments, lists all roles that the security administrator has for the selected organization. The list includes direct assignments, indirect assignments through security groups, and inherited assignments from parent organizations, giving you the complete effective access in one place.", "step.step_checking_a_security_admi_0A871": "The bottom table,
Other Organization Memberships, lists other organizations where the security administrator is a member. This table only shows organizations that you yourself have IAM access to. Click an organization name to switch scope and check the administrator's access in that organization. ", "content.note_checking_a_security_admi_07FAB": "Tip: To see organization memberships only (without the effective access detail), open the security administrator's details from Access Control > Security Administrators and view the Organization Memberships section.
", "desc": [ "content.p_checking_a_security_admi_0CFF3", { "steps.ul_checking_a_security_admi_0E94B": [ "step.step_checking_a_security_admi_077B3" ] }, "content.p_checking_a_security_admi_0C747", { "steps.steps_checking_a_security_admi_03CA8": [ "step.step_checking_a_security_admi_02C54", "step.step_checking_a_security_admi_032AA", "step.step_checking_a_security_admi_07C42", "content.p_checking_a_security_admi_0FAD5", "content.p_checking_a_security_admi_0CFAB", "step.step_checking_a_security_admi_0D7E5", "content.p_checking_a_security_admi_005E0" ] }, "content.p_checking_a_security_admi_0ED3D", { "steps.ul_checking_a_security_admi_08FED": [ "step.step_checking_a_security_admi_043F6", "step.step_checking_a_security_admi_0A871" ] }, "content.note_checking_a_security_admi_07FAB" ] }, "using_inheritance_effectively-latest-en.json": { "title": "title_using_inheritance_effect_0D2BA", "title_using_inheritance_effect_0D2BA": "Using inheritance effectively", "shortdesc": "shortdesc_using_inheritance_effect_06E56", "shortdesc_using_inheritance_effect_06E56": "Assigning a role at a parent organization grants the access to all child organizations through a single role assignment. This can sharply reduce the number of assignments you need to manage.", "content.p_using_inheritance_effect_00ED1": "Role assignments made at a parent organization automatically cascade to all child organizations. This means that one role assignment at a high level can serve many lower-level organizations. Any organizations added later inherit the same access without further configuration. Used well, inheritance keeps deployments compact, consistent, and auditable.", "content.p_using_inheritance_effect_06A51": "Use inheritance when:", "step.step_using_inheritance_effect_0A995": "The same set of security administrators should have the same access across all child organizations of a parent. For example, a SOC team that monitors all managed companies under a Solution Provider.", "step.step_using_inheritance_effect_03713": "Access should automatically extend to new child organizations as the hierarchy grows. For example, a new company onboarded under a Service Partner should automatically be visible to the partner's incident response team.", "step.step_using_inheritance_effect_07285": "You want to keep the total number of role assignments low, both for ease of management and to stay within the per-tenant role assignment limit.", "content.p_using_inheritance_effect_0B1AF": "Do not rely on inheritance when:", "step.step_using_inheritance_effect_050BD": "Access should be limited to specific child organizations rather than all of them. Assign the role at the specific organizations instead.", "step.step_using_inheritance_effect_06364": "A parent-level assignment would grant broader access than the security administrators should have at that level. The narrowest appropriate scope is always preferable.", "content.p_using_inheritance_effect_07BB2": "Inheritance applies only to partner hierarchies. Company organizations have no child organizations, so inheritance does not apply to assignments made at a company.", "content.note_using_inheritance_effect_0498E": "Note: A company organization can restrict the inheritance it receives from its managing partner. The company's Identity and Access Management (IAM) administrator does this in Organization Settings > General > Access Policies, by enabling Restrict Partner access. This disables a configurable subset of inherited partner roles for that company. Partner administrators planning role assignments should be aware that the inheritance shown at design time may be restricted by the company on the receiving end.", "content.title_using_inheritance_effect_0898F": "Partner SOC team with read access everywhere", "content.p_using_inheritance_effect_06CEE": "A partner wants its SOC team to monitor the entire managed estate.", "step.step_using_inheritance_effect_0F6A0": "Create a SOC Team security group at the Solution Provider organization.", "content.dt_using_inheritance_effect_08AB5": "Exposure Management", "content.dd_using_inheritance_effect_08E8B": "Reading", "content.dt_using_inheritance_effect_084CC": "Vulnerability Management", "content.dd_using_inheritance_effect_06AB7": "Reading", "content.dt_using_inheritance_effect_08DB5": "Broad Context Detection", "content.dd_using_inheritance_effect_04B19": "Reading", "step.step_using_inheritance_effect_0253C": "Assign reading roles to the group, with the Solution Provider as the resource:", "content.p_using_inheritance_effect_0E03F": "Three role assignments at the Solution Provider give every SOC team member read access through inheritance. The access covers the Solution Provider, every Service Partner, and every company. Adding a new company under any Service Partner extends the access automatically.", "content.title_using_inheritance_effect_05797": "Healthcare team with full access to one segment", "content.p_using_inheritance_effect_065EF": "A partner manages several customer segments and wants its healthcare team to have full access to healthcare customers only, with no visibility into other segments.", "step.step_using_inheritance_effect_021DB": "Create a Healthcare Team security group at the Solution Provider organization.", "content.dt_using_inheritance_effect_094E1": "Exposure Management", "content.dd_using_inheritance_effect_00EA6": "Editing", "content.dt_using_inheritance_effect_00CED": "Vulnerability Management", "content.dd_using_inheritance_effect_01FAB": "Editing", "content.dt_using_inheritance_effect_02279": "Cloud Configuration", "content.dd_using_inheritance_effect_01069": "Editing", "step.step_using_inheritance_effect_0E08A": "Assign editing roles to the group, with the Healthcare Service Partner as the resource:", "content.p_using_inheritance_effect_00BE3": "Three role assignments at the Healthcare Service Partner give every team member full access to all healthcare companies through inheritance. The team has no access to companies under other Service Partners.", "content.title_using_inheritance_effect_0084D": "Executives with read-only access everywhere", "content.p_using_inheritance_effect_0B106": "A partner wants its executives to see the full managed estate without making any changes.", "step.step_using_inheritance_effect_0F83E": "Create an Executives security group at the Solution Provider organization.", "step.step_using_inheritance_effect_00C88": "Assign the Elements Reading All role to the group, with the Solution Provider as the resource.", "content.p_using_inheritance_effect_00988": "A single role assignment at the Solution Provider gives every executive read-only access across the entire estate through inheritance. It automatically covers any organization added later.", "desc": [ "content.p_using_inheritance_effect_00ED1", "content.p_using_inheritance_effect_06A51", { "steps.ul_using_inheritance_effect_0EEBB": [ "step.step_using_inheritance_effect_0A995", "step.step_using_inheritance_effect_03713", "step.step_using_inheritance_effect_07285" ] }, "content.p_using_inheritance_effect_0B1AF", { "steps.ul_using_inheritance_effect_03F7B": [ "step.step_using_inheritance_effect_050BD", "step.step_using_inheritance_effect_06364" ] }, "content.p_using_inheritance_effect_07BB2", "content.note_using_inheritance_effect_0498E", "content.title_using_inheritance_effect_0898F", "content.p_using_inheritance_effect_06CEE", { "steps.ol_using_inheritance_effect_0B8D0": [ "step.step_using_inheritance_effect_0F6A0", "step.step_using_inheritance_effect_0253C", { "dl.dl_using_inheritance_effect_08E80": [ { "dlentry.dlentry_using_inheritance_effect_072BB": [ "content.dt_using_inheritance_effect_08AB5", "content.dd_using_inheritance_effect_08E8B" ] }, { "dlentry.dlentry_using_inheritance_effect_0FEED": [ "content.dt_using_inheritance_effect_084CC", "content.dd_using_inheritance_effect_06AB7" ] }, { "dlentry.dlentry_using_inheritance_effect_047DD": [ "content.dt_using_inheritance_effect_08DB5", "content.dd_using_inheritance_effect_04B19" ] } ] } ] }, "content.p_using_inheritance_effect_0E03F", "content.title_using_inheritance_effect_05797", "content.p_using_inheritance_effect_065EF", { "steps.ol_using_inheritance_effect_02670": [ "step.step_using_inheritance_effect_021DB", "step.step_using_inheritance_effect_0E08A", { "dl.dl_using_inheritance_effect_02532": [ { "dlentry.dlentry_using_inheritance_effect_01134": [ "content.dt_using_inheritance_effect_094E1", "content.dd_using_inheritance_effect_00EA6" ] }, { "dlentry.dlentry_using_inheritance_effect_07301": [ "content.dt_using_inheritance_effect_00CED", "content.dd_using_inheritance_effect_01FAB" ] }, { "dlentry.dlentry_using_inheritance_effect_0B3B8": [ "content.dt_using_inheritance_effect_02279", "content.dd_using_inheritance_effect_01069" ] } ] } ] }, "content.p_using_inheritance_effect_00BE3", "content.title_using_inheritance_effect_0084D", "content.p_using_inheritance_effect_0B106", { "steps.ol_using_inheritance_effect_0BD78": [ "step.step_using_inheritance_effect_0F83E", "step.step_using_inheritance_effect_00C88" ] }, "content.p_using_inheritance_effect_00988" ], "related": [ "limitations-latest-en" ] }, "revoking_access-latest-en.json": { "title": "title_revoking_access_000001_756D2C7", "title_revoking_access_000001_756D2C7": "Revoking access", "shortdesc": "shortdesc_revoking_access_000002_8557C9E", "shortdesc_revoking_access_000002_8557C9E": "Remove role assignments from a security administrator, from a security group, or from the organization view.", "content.p_revoking_access_000010_7CC6A9E": "Choose the entry point that matches the change you want to make:", "step.step_revoking_access_000012_1015C1C": "Remove a direct assignment when a single security administrator should lose access.", "step.step_revoking_access_000013_43CD74B": "Remove an assignment from a security group when an entire team should lose it.", "step.step_revoking_access_000014_7C58192": "Use the organization view when you are removing access from a specific organization.", "desc": [ "content.p_revoking_access_000010_7CC6A9E", { "steps.ul_revoking_access_000011_188CF40": [ "step.step_revoking_access_000012_1015C1C", "step.step_revoking_access_000013_43CD74B", "step.step_revoking_access_000014_7C58192" ] } ] }, "removing_a_direct_role_assignment-latest-en.json": { "title": "title_removing_a_direct_role_a_00750", "title_removing_a_direct_role_a_00750": "Remove a direct role assignment from a security administrator", "shortdesc": "shortdesc_removing_a_direct_role_a_0FCFF", "shortdesc_removing_a_direct_role_a_0FCFF": "Remove a role assignment that was made directly to a specific security administrator, rather than granted through a security group.", "content.p_removing_a_direct_role_a_0CE61": "Before you start, make sure you have:", "step.step_removing_a_direct_role_a_02081": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "content.p_removing_a_direct_role_a_05BFC": "This procedure removes a direct role assignment from a security administrator's Role Assignments tab. Indirect role assignments (those that the administrator receives through security group membership) appear on the same tab for visibility but cannot be removed here. To remove an indirect assignment, remove it from the security group instead.", "step.step_removing_a_direct_role_a_0A94C": "Go to Access Control > Security Administrators.", "step.step_removing_a_direct_role_a_0E515": "Click the security administrator's email address to open their details.", "step.step_removing_a_direct_role_a_04F53": "Open the Role Assignments tab.", "content.p_removing_a_direct_role_a_0E900": "Indirect assignments cannot be selected on this tab.
", "step.step_removing_a_direct_role_a_0A8D0": "Select the direct role assignment that you want to remove.", "step.step_removing_a_direct_role_a_043A3": "Click Delete Assignment, and confirm the deletion.", "content.p_removing_a_direct_role_a_0F3D7": "The role assignment is removed. The security administrator loses the corresponding access within one minute.", "desc": [ "content.p_removing_a_direct_role_a_0CE61", { "steps.ul_removing_a_direct_role_a_0069D": [ "step.step_removing_a_direct_role_a_02081" ] }, "content.p_removing_a_direct_role_a_05BFC", { "steps.steps_removing_a_direct_role_a_06D5C": [ "step.step_removing_a_direct_role_a_0A94C", "step.step_removing_a_direct_role_a_0E515", "step.step_removing_a_direct_role_a_04F53", "step.step_removing_a_direct_role_a_0A8D0", "content.p_removing_a_direct_role_a_0E900", "step.step_removing_a_direct_role_a_043A3" ] }, "content.p_removing_a_direct_role_a_0F3D7" ] }, "removing_a_role_assignment_from_a_security_group-latest-en.json": { "title": "title_removing_a_role_assignme_03FC3", "title_removing_a_role_assignme_03FC3": "Remove a role assignment from a security group", "shortdesc": "shortdesc_removing_a_role_assignme_096DD", "shortdesc_removing_a_role_assignme_096DD": "Remove a role from a security group so that all members of the group lose the corresponding indirect access.", "content.p_removing_a_role_assignme_036ED": "Before you start, make sure you have:", "step.step_removing_a_role_assignme_038BC": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "content.p_removing_a_role_assignme_0D704": "Removing a role assignment from a security group affects every member of the group. Each member loses the corresponding indirect access at the organization where the assignment was made. If you want to remove the access for a single member only, remove that member from the security group instead, or create a separate security group with the appropriate set of members and roles.", "step.step_removing_a_role_assignme_0DCCA": "Select the organization where the security group belongs in the Scope Selector.", "step.step_removing_a_role_assignme_0924D": "Go to Access Control > Security Groups.", "step.step_removing_a_role_assignme_0DB97": "Click the security group name to open its details.", "step.step_removing_a_role_assignme_08895": "Open the Role Assignments tab.", "step.step_removing_a_role_assignme_0D48C": "Select the role assignment that you want to remove.", "step.step_removing_a_role_assignme_0EBC5": "Click Delete Assignment, and confirm the deletion.", "content.p_removing_a_role_assignme_08359": "The role assignment is removed from the security group. All members of the group lose the corresponding indirect access within one minute. Other role assignments for the group are unaffected.", "desc": [ "content.p_removing_a_role_assignme_036ED", { "steps.ul_removing_a_role_assignme_018AA": [ "step.step_removing_a_role_assignme_038BC" ] }, "content.p_removing_a_role_assignme_0D704", { "steps.steps_removing_a_role_assignme_0B9BF": [ "step.step_removing_a_role_assignme_0DCCA", "step.step_removing_a_role_assignme_0924D", "step.step_removing_a_role_assignme_0DB97", "step.step_removing_a_role_assignme_08895", "step.step_removing_a_role_assignme_0D48C", "step.step_removing_a_role_assignme_0EBC5" ] }, "content.p_removing_a_role_assignme_08359" ] }, "removing_role_assignments_from_organization_view-latest-en.json": { "title": "title_removing_role_assignment_0286F", "title_removing_role_assignment_0286F": "Remove a role assignments from the organization view", "shortdesc": "shortdesc_removing_role_assignment_0416D", "shortdesc_removing_role_assignment_0416D": "Remove one or more role assignments that were created at a specific organization, working from the organization's Role Assignments tab.", "content.p_removing_role_assignment_042EC": "Before you start, make sure you have:", "step.step_removing_role_assignment_0E463": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "step.step_removing_role_assignment_01DA2": "The target organization selected in the Scope Selector.", "content.p_removing_role_assignment_0A553": "Use this procedure to remove role assignments at a single organization in one operation. You can select multiple assignments and remove them together. Inherited role assignments (those created at a parent organization) appear in the table but are disabled for selection. To remove an inherited assignment, remove it at the parent organization where it was originally created.", "step.step_removing_role_assignment_073B9": "Select the organization in the Scope Selector.", "step.step_removing_role_assignment_0C84C": "Go to Access Control > Role Assignments.", "content.p_removing_role_assignment_09F2D": "Inherited assignments are disabled and cannot be selected.
", "step.step_removing_role_assignment_0BED9": "Select one or more role assignments that you want to remove.", "step.step_removing_role_assignment_0BCE1": "Click Delete Assignments, and confirm the deletion.", "content.p_removing_role_assignment_02C44": "The selected role assignments are removed from this organization. The affected subjects (security groups and security administrators) lose the corresponding access at this organization within one minute. If a subject still has access through another assignment (for example, through a different security group, or through an inherited assignment at a parent organization), that access is unaffected.", "desc": [ "content.p_removing_role_assignment_042EC", { "steps.ul_removing_role_assignment_096F1": [ "step.step_removing_role_assignment_0E463", "step.step_removing_role_assignment_01DA2" ] }, "content.p_removing_role_assignment_0A553", { "steps.steps_removing_role_assignment_03A5C": [ "step.step_removing_role_assignment_073B9", "step.step_removing_role_assignment_0C84C", "step.step_removing_role_assignment_0BED9", "content.p_removing_role_assignment_09F2D", "step.step_removing_role_assignment_0BCE1" ] }, "content.p_removing_role_assignment_02C44" ] }, "constraints_gotchas-latest-en.json": { "title": "title_role_assignment_limitati_03348", "title_role_assignment_limitati_03348": "Role assignment limitations", "shortdesc": "shortdesc_role_assignment_limitati_02F33", "shortdesc_role_assignment_limitati_02F33": "Role assignment in Elements RBAC follows four structural rules that determine what can and cannot be done when granting access through roles.", "content.dt_role_assignment_limitati_022DC": "Scope is required", "content.dd_role_assignment_limitati_0F029": "A role assignment must specify an organization where the role applies. For example, if a user has the Identity and Access Management (IAM) Administrator role but no assigned organization, the role assignment is incomplete. If the user has the IAM Administrator role in organization ABC, the role assignment is complete. The organization (resource) is mandatory for every role assignment.", "content.dt_role_assignment_limitati_0592D": "Roles cannot be assigned partially", "content.dd_role_assignment_limitati_03609": "Roles are atomic. A role cannot be granted in part. For example, an IAM Administrator role cannot be assigned only for security groups. Either the role is assigned in full, or it is not assigned at all. When a role is broader than what is needed, the solution is to use a more granular role.", "content.dt_role_assignment_limitati_0C75D": "Composing granular roles is complex to manage", "content.dd_role_assignment_limitati_066DB": "Combining many granular roles to create a custom permission set provides precise access control, but it is complex to set up and maintain, and it requires understanding the full set of available roles.", "content.dt_role_assignment_limitati_0F06C": "Large-scope roles cannot be decomposed", "content.dd_role_assignment_limitati_03A68": "Elements Editing All and Elements Reading All are indivisible. You cannot exclude Identity and Access Management (IAM) from an Elements Editing All assignment or exclude specific capabilities from a large-scope role. When selective access is needed, use granular roles instead.", "content.p_role_assignment_limitati_0092E": "Assigning roles directly to individual administrators has several drawbacks:", "step.step_role_assignment_limitati_01191": "They do not scale, because each administrator must be managed individually.", "step.step_role_assignment_limitati_0CD66": "They are hard to audit, because there is no straightforward way to list all administrators with a specific role.", "step.step_role_assignment_limitati_05B60": "They make consistency hard to maintain across administrators with similar responsibilities.", "step.step_role_assignment_limitati_0789E": "They increase the total role assignment count and contribute toward reaching the tenant's role assignment limit.", "step.step_role_assignment_limitati_02A52": "They make troubleshooting access issues more complex.", "desc": [ { "dl.dl_role_assignment_limitati_04F5F": [ { "dlentry.dlentry_role_assignment_limitati_09276": [ "content.dt_role_assignment_limitati_022DC", "content.dd_role_assignment_limitati_0F029" ] }, { "dlentry.dlentry_role_assignment_limitati_04D0B": [ "content.dt_role_assignment_limitati_0592D", "content.dd_role_assignment_limitati_03609" ] }, { "dlentry.dlentry_role_assignment_limitati_0B055": [ "content.dt_role_assignment_limitati_0C75D", "content.dd_role_assignment_limitati_066DB" ] }, { "dlentry.dlentry_role_assignment_limitati_0259F": [ "content.dt_role_assignment_limitati_0F06C", "content.dd_role_assignment_limitati_03A68" ] } ] }, "content.p_role_assignment_limitati_0092E", { "steps.ul_role_assignment_limitati_04317": [ "step.step_role_assignment_limitati_01191", "step.step_role_assignment_limitati_0CD66", "step.step_role_assignment_limitati_05B60", "step.step_role_assignment_limitati_0789E", "step.step_role_assignment_limitati_02A52" ] } ] }, "faq_troubleshooting_role_assignments-latest-en.json": { "title": "title_faq_troubleshooting_role_0B8A2", "title_faq_troubleshooting_role_0B8A2": "Troubleshooting role assignments", "shortdesc": "shortdesc_faq_troubleshooting_role_0C8F2", "shortdesc_faq_troubleshooting_role_0C8F2": "Use these suggestions to investigate the most common issues with role assignments and effective access.", "content.dt_faq_troubleshooting_role_01DFF": "A security administrator has unexpected access", "content.dd_faq_troubleshooting_role_0FB4F": "", "step.step_faq_troubleshooting_role_03E95": "Check indirect assignments to see whether the administrator receives the access through security group membership.", "step.step_faq_troubleshooting_role_0F2B8": "Check inherited assignments to see whether the access comes from a role assignment at a parent organization.", "step.step_faq_troubleshooting_role_0D336": "Use the Check Access feature to see the administrator's effective access in the selected organization.", "content.dt_faq_troubleshooting_role_00D40": "A security administrator cannot access a feature", "content.dd_faq_troubleshooting_role_0E7EF": "", "step.step_faq_troubleshooting_role_0DE17": "Verify that the administrator has a role assignment for that capability.", "step.step_faq_troubleshooting_role_04DAD": "Check the organization scope. The administrator may have access in a different organization than expected.", "step.step_faq_troubleshooting_role_0A0DA": "Verify that the role assignment was not removed and that the security group membership was not revoked.", "step.step_faq_troubleshooting_role_01294": "Check that the administrator belongs to the correct organization.", "content.dt_faq_troubleshooting_role_09A73": "A role assignment cannot be removed", "content.dd_faq_troubleshooting_role_0882F": "", "step.step_faq_troubleshooting_role_06FB1": "Inherited assignments cannot be removed at a child organization. Navigate to the parent organization where the assignment was created and remove it there.", "step.step_faq_troubleshooting_role_0ABC3": "Indirect assignments cannot be removed from a security administrator's view. Remove the assignment from the security group, or remove the administrator from the group.", "step.step_faq_troubleshooting_role_072F1": "Assignments on provisioned security groups require the group to be deleted in Entra ID, not in Elements.", "content.dt_faq_troubleshooting_role_0C8EF": "The role assignment limit has been reached", "content.dd_faq_troubleshooting_role_0470D": "", "step.step_faq_troubleshooting_role_0AE7F": "Consolidate direct user assignments into security groups.", "step.step_faq_troubleshooting_role_0AE2B": "Use inheritance. Assign roles at a parent organization instead of at each child.", "step.step_faq_troubleshooting_role_02239": "Remove redundant assignments.", "step.step_faq_troubleshooting_role_05B34": "Audit role assignments and remove obsolete ones.", "desc": [ { "dl.dl_faq_troubleshooting_role_01811": [ { "dlentry.dlentry_faq_troubleshooting_role_02ADF": [ "content.dt_faq_troubleshooting_role_01DFF", "content.dd_faq_troubleshooting_role_0FB4F", { "steps.ol_faq_troubleshooting_role_0EFC8": [ "step.step_faq_troubleshooting_role_03E95", "step.step_faq_troubleshooting_role_0F2B8", "step.step_faq_troubleshooting_role_0D336" ] } ] }, { "dlentry.dlentry_faq_troubleshooting_role_0FCCB": [ "content.dt_faq_troubleshooting_role_00D40", "content.dd_faq_troubleshooting_role_0E7EF", { "steps.ol_faq_troubleshooting_role_0FEF9": [ "step.step_faq_troubleshooting_role_0DE17", "step.step_faq_troubleshooting_role_04DAD", "step.step_faq_troubleshooting_role_0A0DA", "step.step_faq_troubleshooting_role_01294" ] } ] }, { "dlentry.dlentry_faq_troubleshooting_role_08D6D": [ "content.dt_faq_troubleshooting_role_09A73", "content.dd_faq_troubleshooting_role_0882F", { "steps.ol_faq_troubleshooting_role_0B7E1": [ "step.step_faq_troubleshooting_role_06FB1", "step.step_faq_troubleshooting_role_0ABC3", "step.step_faq_troubleshooting_role_072F1" ] } ] }, { "dlentry.dlentry_faq_troubleshooting_role_0F87F": [ "content.dt_faq_troubleshooting_role_0C8EF", "content.dd_faq_troubleshooting_role_0470D", { "steps.ol_faq_troubleshooting_role_0AB3E": [ "step.step_faq_troubleshooting_role_0AE7F", "step.step_faq_troubleshooting_role_0AE2B", "step.step_faq_troubleshooting_role_02239", "step.step_faq_troubleshooting_role_05B34" ] } ] } ] } ] }, "microsoft_entra_id_integration-2-latest-en.json": { "title": "title_microsoft_entra_id_integ_06980", "title_microsoft_entra_id_integ_06980": "Setting up Microsoft Entra ID integration", "shortdesc": "shortdesc_microsoft_entra_id_integ_027A0", "shortdesc_microsoft_entra_id_integ_027A0": "Integrate Elements with Microsoft Entra ID to centralize authentication and automatically provision security administrators and security groups.", "content.p_microsoft_entra_id_integ_09339": "Integration has two parts. Single sign-on (SSO) federation controls how security administrators sign in. System for Cross-domain Identity Management (SCIM) provisioning keeps Elements aligned with the users and groups in your Entra ID tenant. Set up SSO federation first. Then set up provisioning. Use the limitations and best-practice topics to validate your configuration.", "desc": [ "content.p_microsoft_entra_id_integ_09339" ] }, "microsoft_entra_id_integration-latest-en.json": { "title": "title_what_is_microsoft_entra__0B4A3", "title_what_is_microsoft_entra__0B4A3": "What is Microsoft Entra ID integration", "shortdesc": "shortdesc_what_is_microsoft_entra__034B6", "shortdesc_what_is_microsoft_entra__034B6": "Microsoft Entra ID is Microsoft's cloud identity and access management service, and integrating it with Elements automates security administrator and security group management.", "content.p_what_is_microsoft_entra__05569": "Microsoft Entra ID (formerly Azure Active Directory) is Microsoft's cloud identity and access management service. Many organizations already use Entra ID to manage their users, security groups, authentication, and password policies. When Entra ID is integrated with Elements, Entra becomes the source of truth for identity, and Elements automatically reflects what Entra holds.", "content.p_what_is_microsoft_entra__02D78": "Integration splits responsibility between the two systems:", "content.dt_what_is_microsoft_entra__05438": "Identity management: Entra ID", "content.dd_what_is_microsoft_entra__00EB9": "Holds the user accounts and their attributes, the security groups and their memberships, and the authentication credentials. Entra is the single source of truth for who exists in the organization.", "content.dt_what_is_microsoft_entra__06C3A": "Authorization management: Elements", "content.dd_what_is_microsoft_entra__09576": "Holds the role assignments that link Entra users and security groups to Elements permissions, and defines the organizational scope of those permissions. Elements decides what each user or group can do.", "content.p_what_is_microsoft_entra__00C59": "The integration has two parts that can be configured independently or together:", "content.dt_what_is_microsoft_entra__0016D": "SSO Federation", "content.dd_what_is_microsoft_entra__07B4A": "Authentication is delegated to Entra ID. Security administrators in a federated email domain sign in with their Entra credentials rather than with an Elements password.", "content.dt_what_is_microsoft_entra__0FB11": "SCIM provisioning", "content.dd_what_is_microsoft_entra__07BA2": "Identity is synchronized from Entra ID. Selected users and security groups in Entra appear automatically in Elements, and changes in Entra are reflected in Elements within minutes.", "content.p_what_is_microsoft_entra__0BC3E": "Both parts are typically used together for fully automated access management. After SSO Federation and System for Cross-domain Identity Management (SCIM) provisioning are configured, and role assignments are defined in Elements for the provisioned security groups, day-to-day onboarding, offboarding, and group-membership changes happen entirely in Entra ID. Elements requires no further intervention.", "content.note_what_is_microsoft_entra__0D5E3": "Note: SCIM provisioning depends on SSO Federation. SSO Federation can be used on its own without SCIM provisioning, but provisioning cannot work without federation.", "desc": [ "content.p_what_is_microsoft_entra__05569", "content.p_what_is_microsoft_entra__02D78", { "dl.dl_what_is_microsoft_entra__09748": [ { "dlentry.dlentry_what_is_microsoft_entra__0071F": [ "content.dt_what_is_microsoft_entra__05438", "content.dd_what_is_microsoft_entra__00EB9" ] }, { "dlentry.dlentry_what_is_microsoft_entra__05153": [ "content.dt_what_is_microsoft_entra__06C3A", "content.dd_what_is_microsoft_entra__09576" ] } ] }, "content.p_what_is_microsoft_entra__00C59", { "dl.dl_what_is_microsoft_entra__0818F": [ { "dlentry.dlentry_what_is_microsoft_entra__0BA1E": [ "content.dt_what_is_microsoft_entra__0016D", "content.dd_what_is_microsoft_entra__07B4A" ] }, { "dlentry.dlentry_what_is_microsoft_entra__080FA": [ "content.dt_what_is_microsoft_entra__0FB11", "content.dd_what_is_microsoft_entra__07BA2" ] } ] }, "content.p_what_is_microsoft_entra__0BC3E", "content.note_what_is_microsoft_entra__0D5E3" ] }, "sso_federation-latest-en.json": { "title": "title_sso_federation_000001_CD999566", "title_sso_federation_000001_CD999566": "SSO Federation", "shortdesc": "shortdesc_sso_federation_000002_9C35E092", "shortdesc_sso_federation_000002_9C35E092": "SSO Federation connects Elements to Microsoft Entra ID for authentication, so that security administrators in a federated email domain sign in with their Entra ID credentials rather than an Elements password.", "content.p_sso_federation_000012_FF9F3FFE": "When an organization configures SSO Federation, it proves ownership of one or more email domains and links those domains to its Entra ID tenant. Security administrators whose email addresses fall in a federated domain authenticate through Entra ID. Elements does not store passwords for these administrators and redirects them to Entra at sign-in.", "content.p_sso_federation_000013_BF408D36": "SSO Federation also changes how security administrator accounts are owned and managed:", "step.step_sso_federation_000015_59F97AE2": "Accounts in a federated domain become federated accounts, owned by the federated organization rather than by the security administrator.", "step.step_sso_federation_000017_82F0F531": "Authentication is handled by Entra ID, including multi-factor authentication and password policies.", "step.step_sso_federation_000019_01261EE7": "Identity and Access Management (IAM) administrators in the federated organization gain full control over the account lifecycle, including hard deletion across the entire Elements system.", "step.step_sso_federation_00001B_AC48FD30": "Sign-in events are recorded in the Entra ID audit trail.", "content.p_sso_federation_00001D_EEC51B14": "SSO Federation is configured per organization. A federated organization can federate one or more email domains. Each domain must be verified through Entra ID before federation takes effect.", "content.p_sso_federation_00001E_DD237352": "SSO Federation can be configured on its own, or together with System for Cross-domain Identity Management (SCIM) provisioning. SCIM provisioning depends on SSO Federation, but SSO Federation does not depend on SCIM provisioning.", "content.note_sso_federation_00001F_862761B2": "Important: The email address in Elements and the Entra ID User Principal Name (UPN) must match. The first Elements security administrator must already have an email address in a domain you intend to federate. Mismatches between Elements emails and Entra UPNs cause authentication failures.", "content.note_sso_federation_000021_D1D70487": "Note: An Elements account created before SSO Federation is configured for its email domain becomes a federated account once federation is in place. The reverse is not generally possible. Once an account is federated, it stays federated as long as its domain remains federated.", "desc": [ "content.p_sso_federation_000012_FF9F3FFE", "content.p_sso_federation_000013_BF408D36", { "steps.ul_sso_federation_000014_E47FB417": [ "step.step_sso_federation_000015_59F97AE2", "step.step_sso_federation_000017_82F0F531", "step.step_sso_federation_000019_01261EE7", "step.step_sso_federation_00001B_AC48FD30" ] }, "content.p_sso_federation_00001D_EEC51B14", "content.p_sso_federation_00001E_DD237352", "content.note_sso_federation_00001F_862761B2", "content.note_sso_federation_000021_D1D70487" ] }, "sso_federation_setup-latest-en.json": { "title": "title_configuring_sso_federati_0A359", "title_configuring_sso_federati_0A359": "Configure SSO Federation", "shortdesc": "shortdesc_configuring_sso_federati_09100", "shortdesc_configuring_sso_federati_09100": "Set up federated authentication between Elements and Microsoft Entra ID so that security administrators in the federated email domain sign in with their Entra ID credentials.", "content.p_configuring_sso_federati_01879": "Before you start, make sure you have:", "step.step_configuring_sso_federati_01B7A": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role in the organization where you will configure federation.", "step.step_configuring_sso_federati_09FB0": "A Microsoft Entra ID tenant, and the privileges in Entra ID to list verified domains and configure single sign-on.", "step.step_configuring_sso_federati_02A94": "Ownership of the email domain you intend to federate.", "step.step_configuring_sso_federati_05B06": "An Elements account with an email address in the domain you intend to federate.", "content.p_configuring_sso_federati_0B1F6": "SSO Federation is configured per email domain, not per organization. All security administrators with email addresses in the federated domain authenticate through Entra ID. To federate multiple domains in the same organization, repeat this procedure for each additional domain.", "content.p_configuring_sso_federati_0C35B": "After RBAC is enabled, the Security Administrators page is the location for configuring both Entra ID Federation and System for Cross-domain Identity Management (SCIM) provisioning.
", "step.step_configuring_sso_federati_0627F": "Go to Organization Settings > Security Administrators.", "step.step_configuring_sso_federati_06B40": "Click Configure Single Sign-On Federation.", "step.step_configuring_sso_federati_0EA2E": "Review the prerequisites checklist in the wizard, and confirm that each item is satisfied.", "content.p_configuring_sso_federati_0146A": "Elements completes the federation configuration automatically, using the information returned by Entra ID.", "step.step_configuring_sso_federati_017E1": "Sign in to Entra ID using a privileged account to complete the federation setup.", "step.step_configuring_sso_federati_09874": "Sign out of Elements.", "content.p_configuring_sso_federati_00586": "The first federated sign-in for an existing account requires the Elements password once, to link the local account to the federated identity. After this one-time linking, the Elements password is no longer used.", "step.step_configuring_sso_federati_08074": "Sign in with your federated email address, and enter your existing Elements password when prompted.", "step.step_configuring_sso_federati_0E430": "Complete the Entra ID authentication.", "content.p_configuring_sso_federati_09E0F": "SSO Federation is active for the email domain. Security administrators with email addresses in this domain sign in through Entra ID rather than with an Elements password. Existing Elements accounts are linked to federated identities the first time each security administrator signs in.", "desc": [ "content.p_configuring_sso_federati_01879", { "steps.ul_configuring_sso_federati_0A703": [ "step.step_configuring_sso_federati_01B7A", "step.step_configuring_sso_federati_09FB0", "step.step_configuring_sso_federati_02A94", "step.step_configuring_sso_federati_05B06" ] }, "content.p_configuring_sso_federati_0B1F6", { "steps.steps_configuring_sso_federati_0B365": [ "step.step_configuring_sso_federati_0627F", "content.p_configuring_sso_federati_0C35B", "step.step_configuring_sso_federati_06B40", "step.step_configuring_sso_federati_0EA2E", "step.step_configuring_sso_federati_017E1", "content.p_configuring_sso_federati_0146A", "step.step_configuring_sso_federati_09874", "step.step_configuring_sso_federati_08074", "content.p_configuring_sso_federati_00586", "step.step_configuring_sso_federati_0E430" ] }, "content.p_configuring_sso_federati_09E0F" ], "related": [ "scim_provisioning_configuration-latest-en" ] }, "scim_provisioning-latest-en.json": { "title": "title_scim_provisioning_000001_60A01", "title_scim_provisioning_000001_60A01": "SCIM provisioning", "shortdesc": "shortdesc_scim_provisioning_000002_A875D", "shortdesc_scim_provisioning_000002_A875D": "System for Cross-domain Identity Management (SCIM) provisioning automatically synchronizes security administrators and security groups from Microsoft Entra ID into Elements. User management then happens in Entra ID rather than in the Elements portal.", "content.p_scim_provisioning_000012_9CF78": "When an organization configures SCIM provisioning, Entra ID continuously synchronizes a configurable set of security administrators and security groups to Elements. Changes made in Entra ID are reflected in Elements within minutes. These changes include adding or removing a security administrator, changing group membership, and renaming or deleting a group.", "content.p_scim_provisioning_000013_9F148": "SCIM provisioning produces two kinds of objects in Elements:", "content.dt_scim_provisioning_000016_EB5F3": "Provisioned security administrators", "content.dd_scim_provisioning_000017_887E5": "Synced from Entra ID users. Account ownership and authentication are controlled by Entra ID through SSO Federation. The account cannot be created or removed manually in Elements.", "content.dt_scim_provisioning_000019_84859": "Provisioned security groups", "content.dd_scim_provisioning_00001A_8D9EE": "Synced from Entra ID security groups. The group name, description, and membership are managed in Entra ID and cannot be modified in the Elements portal. Only role assignments are configured in Elements.", "content.p_scim_provisioning_00001B_0ED8C": "SCIM provisioning is typically configured at the top of an organization's hierarchy. For partners, this is the Solution Provider organization; for companies with their own Entra ID tenant, it is the company organization. Provisioning to lower levels is possible but requires careful planning and is not the standard configuration.", "content.note_scim_provisioning_00001C_B405D": "Important: You can provision the same Entra ID tenant to more than one Elements organization. For example, you might provision it to both a Solution Provider and one or more Service Partners. This setup is supported, but it is prone to misconfiguration. Plan the scope and filters carefully so that each organization receives only its intended security administrators and security groups. Verify the result after the first sync.", "content.p_scim_provisioning_00001E_3DF79": "The provisioning scope and filters in Entra ID determine which security administrators and groups are synchronized. Only the in-scope administrators and groups appear in Elements. The rest remain in Entra ID and are not visible to Elements. We recommend setting filters to provision only the administrators and groups that need Elements access. Do not provision every user and group in the Entra ID tenant.", "content.p_scim_provisioning_00001F_2A3C4": "SCIM provisioning depends on SSO Federation. The federated email domains determine which users are eligible for provisioning, and the resulting accounts are always federated accounts.", "content.note_scim_provisioning_000020_E48D6": "Important: SCIM provisioning is the recommended operating mode for organizations already using Microsoft 365. Once role assignments are defined for the provisioned security groups, no day-to-day user-management operations are needed in the Elements portal. All onboarding, offboarding, and group-membership changes happen in Entra ID.", "desc": [ "content.p_scim_provisioning_000012_9CF78", "content.p_scim_provisioning_000013_9F148", { "dl.dl_scim_provisioning_000014_9823E": [ { "dlentry.dlentry_scim_provisioning_000015_91690": [ "content.dt_scim_provisioning_000016_EB5F3", "content.dd_scim_provisioning_000017_887E5" ] }, { "dlentry.dlentry_scim_provisioning_000018_FE290": [ "content.dt_scim_provisioning_000019_84859", "content.dd_scim_provisioning_00001A_8D9EE" ] } ] }, "content.p_scim_provisioning_00001B_0ED8C", "content.note_scim_provisioning_00001C_B405D", "content.p_scim_provisioning_00001E_3DF79", "content.p_scim_provisioning_00001F_2A3C4", "content.note_scim_provisioning_000020_E48D6" ] }, "scim_provisioning_configuration-latest-en.json": { "title": "title_scim_provisioning_config_01C2E", "title_scim_provisioning_config_01C2E": "Configure SCIM provisioning", "shortdesc": "shortdesc_scim_provisioning_config_07470", "shortdesc_scim_provisioning_config_07470": "Set up automated synchronization of security administrators and security groups from Microsoft Entra ID into Elements through System for Cross-domain Identity Management (SCIM).", "content.p_scim_provisioning_config_0D57D": "Before you start, make sure you have:", "step.step_scim_provisioning_config_0F066": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role in the organization where you will configure provisioning.", "step.step_scim_provisioning_config_032E8": "SSO Federation already configured for the organization. SCIM provisioning depends on SSO Federation.", "step.step_scim_provisioning_config_0083F": "A Microsoft Entra ID tenant, and the privileges in Entra ID to create an enterprise application and configure provisioning. See Microsoft's Entra ID documentation for the exact Entra-side permissions.", "content.p_scim_provisioning_config_02FB3": "SCIM provisioning configuration spans two systems. You start in Elements to generate client credentials, then move to Entra ID to create an enterprise application and configure provisioning using those credentials.", "content.p_scim_provisioning_config_07F12": "SCIM provisioning is typically configured at the Solution Provider organization for partner deployments, or at the company organization for companies with their own Entra tenant.", "step.step_scim_provisioning_config_07515": "Go to Organization Settings > Security Administrators.", "content.p_scim_provisioning_config_0ED97": "The Configure Identity Provisioning flyout provides the URLs and credentials needed to set up SCIM sync with Entra ID.
", "step.step_scim_provisioning_config_06D1A": "Click Configure Identity provisioning.", "step.step_scim_provisioning_config_08260": "Click Add client credentials to generate a client identifier and secret token for the Elements SCIM endpoint.", "content.p_scim_provisioning_config_0862F": "You will paste these values into the enterprise application that you create in Entra ID. Keep the flyout open, or store the values securely, until the Entra-side configuration is complete.", "step.step_scim_provisioning_config_03B0B": "Copy the Tenant URL, the Token endpoint, the Client identifier, and the Secret token from the flyout.", "content.p_scim_provisioning_config_027F2": "In the Entra ID portal, go to Enterprise applications, click New application, select Create your own application, and choose Non-gallery application. Give the application a descriptive name, for example WithSecure Elements SCIM. The detailed Entra ID procedure is in Microsoft's Entra ID documentation.", "step.step_scim_provisioning_config_05652": "In Microsoft Entra ID, create a non-gallery enterprise application.", "content.p_scim_provisioning_config_0AF4B": "Select Automatic provisioning mode and OAuth 2.0 client credentials grant as the authentication method. Paste the Tenant URL and Token endpoint, then paste the Client identifier and Secret token. Click Test Connection to verify the credentials, and save the configuration.", "step.step_scim_provisioning_config_07D3C": "In the enterprise application, open the Provisioning section and configure automatic provisioning using the credentials from Elements.", "content.p_scim_provisioning_config_0CF84": "In the Entra ID provisioning configuration, map a non-empty email attribute (for example, the work email or the User Principal Name) to the email field. Elements identifies provisioned users by email address, so users without a mapped email cannot be provisioned.", "content.note_scim_provisioning_config_0FEB1": "Note: Microsoft Entra suggests that you map externalId to mailNickname. The mailNickname value is human-readable and recognizable in logs.
This mapping is not sufficient when multiple users share the same local part of their e-mail address (the part before the @) but have different domains. Synced Entra guest accounts are one example.
In these cases, map externalId to the Entra objectId instead. If you later migrate to a different Entra tenant, the objectId values do not carry over.", "step.step_scim_provisioning_config_05F40": "Configure the attribute mappings so that every provisioned user has a populated email field.", "content.p_scim_provisioning_config_0F503": "Provisioning is configured between Entra ID and Elements but is not yet active. Before users and groups synchronize, you must filter the scope of what is provisioned and then activate provisioning.", "desc": [ "content.p_scim_provisioning_config_0D57D", { "steps.ul_scim_provisioning_config_067E5": [ "step.step_scim_provisioning_config_0F066", "step.step_scim_provisioning_config_032E8", "step.step_scim_provisioning_config_0083F" ] }, "content.p_scim_provisioning_config_02FB3", "content.p_scim_provisioning_config_07F12", { "steps.steps_scim_provisioning_config_031D4": [ "step.step_scim_provisioning_config_07515", "step.step_scim_provisioning_config_06D1A", "content.p_scim_provisioning_config_0ED97", "step.step_scim_provisioning_config_08260", "step.step_scim_provisioning_config_03B0B", "content.p_scim_provisioning_config_0862F", "step.step_scim_provisioning_config_05652", "content.p_scim_provisioning_config_027F2", "step.step_scim_provisioning_config_07D3C", "content.p_scim_provisioning_config_0AF4B", "step.step_scim_provisioning_config_05F40", "content.p_scim_provisioning_config_0CF84", "content.note_scim_provisioning_config_0FEB1" ] }, "content.p_scim_provisioning_config_0F503" ], "related": [ "filtering_which_users_and_groups_synchronize-latest-en", "activating_provisioning-latest-en", "verifying_that_provisioning_works-latest-en" ] }, "filtering_which_users_and_groups_synchronize-latest-en.json": { "title": "title_filtering_which_users_an_09AFD", "title_filtering_which_users_an_09AFD": "Filter which users and groups synchronize", "shortdesc": "shortdesc_filtering_which_users_an_0EC7B", "shortdesc_filtering_which_users_an_0EC7B": "Limit System for Cross-domain Identity Management (SCIM) provisioning to only the users and security groups that need access to Elements, using filters on the Entra ID enterprise application.", "content.p_filtering_which_users_an_03908": "Before you start, make sure you have:", "step.step_filtering_which_users_an_02473": "A configured SCIM provisioning enterprise application in Entra ID.", "step.step_filtering_which_users_an_0DC6E": "The privileges in Entra ID to modify the enterprise application's provisioning configuration.", "content.p_filtering_which_users_an_0132A": "Entra ID supports two ways to filter the provisioning scope: explicit group assignment, and attribute-based scoping filters. Both are configured in the enterprise application's Provisioning section.", "content.note_filtering_which_users_an_0952A": "Important: Filter provisioning so that Elements synchronizes only the users and groups that need access. An unfiltered sync can exceed the system limits, and a group that passes the member limit stops adding members.", "step.step_filtering_which_users_an_0386E": "In the SCIM provisioning enterprise application in Entra ID, open the Provisioning section.", "step.step_filtering_which_users_an_05A24": "Set the provisioning scope to Sync only assigned users and groups.", "content.p_filtering_which_users_an_0F03E": "Assigning a security group provisions the group and its members. To provision an individual user without provisioning the whole group, assign the user directly. We recommend assigning groups rather than individual users.", "step.step_filtering_which_users_an_021EC": "In the Users and groups tab, assign the security groups that should be synchronized to Elements.", "step.step_filtering_which_users_an_0EED0": "Save the configuration.", "content.p_filtering_which_users_an_01240": "SCIM provisioning is limited to the assigned users and security groups. When provisioning is active, only these objects are synchronized to Elements.", "content.title_filtering_which_users_an_0CBC8": "Using a naming convention and attribute-based filter", "content.p_filtering_which_users_an_022F4": "As an alternative to explicit assignment, you can use an attribute-based scoping filter to select security groups by name. This pattern works well when you can adopt a naming convention for Elements-related security groups in Entra ID.", "step.step_filtering_which_users_an_052E1": "Ensure that security groups intended for Elements share a common naming pattern. A common choice is an Elements- prefix, for example Elements-SOC-Team, Elements-Administrators, or Elements-ViewOnly.", "step.step_filtering_which_users_an_015FE": "In the enterprise application's Provisioning section, set the scope to Sync all users and groups.", "step.step_filtering_which_users_an_0B92C": "Add a scoping filter where the displayName attribute matches the chosen pattern, for example displayName startsWith Elements-.", "step.step_filtering_which_users_an_0BDC2": "Save the configuration.", "content.p_filtering_which_users_an_04AA2": "Only security groups matching the filter are synchronized to Elements. Users are provisioned through their membership in those groups.", "desc": [ "content.p_filtering_which_users_an_03908", { "steps.ul_filtering_which_users_an_02590": [ "step.step_filtering_which_users_an_02473", "step.step_filtering_which_users_an_0DC6E" ] }, "content.p_filtering_which_users_an_0132A", "content.note_filtering_which_users_an_0952A", { "steps.steps_filtering_which_users_an_0A2AF": [ "step.step_filtering_which_users_an_0386E", "step.step_filtering_which_users_an_05A24", "step.step_filtering_which_users_an_021EC", "content.p_filtering_which_users_an_0F03E", "step.step_filtering_which_users_an_0EED0" ] }, "content.p_filtering_which_users_an_01240", "content.title_filtering_which_users_an_0CBC8", "content.p_filtering_which_users_an_022F4", { "steps.ol_filtering_which_users_an_08385": [ "step.step_filtering_which_users_an_052E1", "step.step_filtering_which_users_an_015FE", "step.step_filtering_which_users_an_0B92C", "step.step_filtering_which_users_an_0BDC2" ] }, "content.p_filtering_which_users_an_04AA2" ], "related": [ "limitations-latest-en" ] }, "activating_provisioning-latest-en.json": { "title": "title_activating_provisioning_009A53", "title_activating_provisioning_009A53": "Activate provisioning", "shortdesc": "shortdesc_activating_provisioning_00B622", "shortdesc_activating_provisioning_00B622": "Turn on System for Cross-domain Identity Management (SCIM) provisioning in Entra ID to start synchronizing the configured users and security groups into Elements.", "content.p_activating_provisioning_00DEB2": "Before you start, make sure you have:", "step.step_activating_provisioning_00D58C": "A configured SCIM provisioning enterprise application in Entra ID, with filters set for the users and security groups that should synchronize.", "step.step_activating_provisioning_001E42": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role in the organization where provisioning was configured.", "step.step_activating_provisioning_00F24C": "The privileges in Entra ID to turn on provisioning for the enterprise application.", "content.p_activating_provisioning_00162F": "Activation is the final step in setting up SCIM provisioning. Once activation completes, Entra ID begins continuously synchronizing the in-scope users and security groups to Elements.", "content.p_activating_provisioning_00866E": "The initial sync begins immediately and may take 20 to 40 minutes to complete. Subsequent changes in Entra ID sync to Elements continuously, typically within minutes.", "step.step_activating_provisioning_0006CA": "In the SCIM provisioning enterprise application in Entra ID, set the Provisioning status to On.", "content.p_activating_provisioning_0040D0": "Provisioned users appear in the list with a Provisioned indicator.", "step.step_activating_provisioning_00C670": "In Elements, go to Access Control > Security Administrators to confirm that provisioned users have started to appear.", "content.p_activating_provisioning_0025AA": "Provisioned security groups appear in the list with a Provisioned indicator.", "step.step_activating_provisioning_000E61": "Go to Access Control > Security Groups to confirm that provisioned security groups have started to appear.", "content.p_activating_provisioning_00CF6B": "SCIM provisioning is active. The in-scope users and security groups from Entra ID synchronize continuously to Elements. Subsequent changes in Entra ID (adding users to groups, removing them, renaming groups, deleting accounts) propagate automatically.", "content.note_activating_provisioning_0005F9": "Important: Provisioned users and security groups are immutable in Elements. All changes to provisioned objects must be made in Entra ID. The only Elements-side state for provisioned objects is role assignments, which remain editable in the Elements portal.", "desc": [ "content.p_activating_provisioning_00DEB2", { "steps.ul_activating_provisioning_001367": [ "step.step_activating_provisioning_00D58C", "step.step_activating_provisioning_001E42", "step.step_activating_provisioning_00F24C" ] }, "content.p_activating_provisioning_00162F", { "steps.steps_activating_provisioning_000A44": [ "step.step_activating_provisioning_0006CA", "content.p_activating_provisioning_00866E", "step.step_activating_provisioning_00C670", "content.p_activating_provisioning_0040D0", "step.step_activating_provisioning_000E61", "content.p_activating_provisioning_0025AA" ] }, "content.p_activating_provisioning_00CF6B", "content.note_activating_provisioning_0005F9" ], "related": [ "verifying_that_provisioning_works-latest-en" ] }, "verifying_that_provisioning_works-latest-en.json": { "title": "title_verifying_that_provision_05403", "title_verifying_that_provision_05403": "Verify that provisioning works", "shortdesc": "shortdesc_verifying_that_provision_0FAF3", "shortdesc_verifying_that_provision_0FAF3": "Confirm that System for Cross-domain Identity Management (SCIM) provisioning is synchronizing users and security groups from Entra ID to Elements as expected.", "content.p_verifying_that_provision_07C0A": "Before you start, make sure you have:", "step.step_verifying_that_provision_09531": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role in the organization where provisioning was configured.", "step.step_verifying_that_provision_0B722": "The organization where provisioning was configured selected in the Scope Selector.", "step.step_verifying_that_provision_07B8D": "Access to the Entra ID provisioning configuration to compare it with the configuration in Elements.", "content.p_verifying_that_provision_0C331": "Perform this verification after activating SCIM provisioning, and periodically afterwards to confirm the integration remains healthy.", "step.step_verifying_that_provision_08BE1": "Go to Access Control > Security Groups in Elements.", "content.p_verifying_that_provision_0A6DC": "If a security group does not appear, check the provisioning scope in Entra ID. The group must be either explicitly assigned to the enterprise application or matched by an attribute-based filter.", "step.step_verifying_that_provision_09CD3": "Confirm that the security groups in the Entra ID provisioning scope appear in the list with a Provisioned indicator.", "step.step_verifying_that_provision_02BA2": "Click a provisioned security group to open its details, and open the Members tab.", "content.p_verifying_that_provision_07E84": "The two lists should match. If members are missing from Elements, the most likely cause is that those users are not in the provisioning scope. Being a member of a synchronized group is not enough; the user account itself must also be in scope.", "step.step_verifying_that_provision_024F0": "Compare the members shown in Elements with the membership of the corresponding security group in Entra ID.", "step.step_verifying_that_provision_0F152": "Go to Access Control > Security Administrators, and confirm that provisioned security administrators appear with a Provisioned indicator.", "content.p_verifying_that_provision_0F3EC": "Provisioning is working correctly when:", "step.step_verifying_that_provision_0D4DD": "The configured security groups from Entra ID appear in Elements as provisioned groups.", "step.step_verifying_that_provision_09ECF": "The membership of each provisioned group in Elements matches the membership in Entra ID.", "step.step_verifying_that_provision_09BF5": "The users in those groups appear as provisioned security administrators in Elements.", "desc": [ "content.p_verifying_that_provision_07C0A", { "steps.ul_verifying_that_provision_02947": [ "step.step_verifying_that_provision_09531", "step.step_verifying_that_provision_0B722", "step.step_verifying_that_provision_07B8D" ] }, "content.p_verifying_that_provision_0C331", { "steps.steps_verifying_that_provision_06B65": [ "step.step_verifying_that_provision_08BE1", "step.step_verifying_that_provision_09CD3", "content.p_verifying_that_provision_0A6DC", "step.step_verifying_that_provision_02BA2", "step.step_verifying_that_provision_024F0", "content.p_verifying_that_provision_07E84", "step.step_verifying_that_provision_0F152" ] }, "content.p_verifying_that_provision_0F3EC", { "steps.ul_verifying_that_provision_0E4A4": [ "step.step_verifying_that_provision_0D4DD", "step.step_verifying_that_provision_09ECF", "step.step_verifying_that_provision_09BF5" ] } ], "related": [ "troubleshooting_entra_id_integration-latest-en" ] }, "troubleshooting_entra_id_integration-latest-en.json": { "title": "title_troubleshooting_entra_id_06396", "title_troubleshooting_entra_id_06396": "Troubleshoot Entra ID integration", "shortdesc": "shortdesc_troubleshooting_entra_id_05395", "shortdesc_troubleshooting_entra_id_05395": "Investigate and resolve common issues with SSO Federation and System for Cross-domain Identity Management (SCIM) provisioning.", "content.p_troubleshooting_entra_id_055CC": "Before you start, make sure you have:", "step.step_troubleshooting_entra_id_0AE15": "Access to the Elements Security Center.", "step.step_troubleshooting_entra_id_0EC22": "Access to the Microsoft Entra ID portal where SCIM provisioning was configured.", "content.p_troubleshooting_entra_id_03FBA": "When Entra ID integration does not behave as expected, the most common causes are scope misconfiguration, sync delays, identity mismatches, or attempts to perform Entra-managed actions in Elements. Match the symptom to one of the scenarios in the example below and follow the diagnostic checks for that scenario.", "step.step_troubleshooting_entra_id_0C95A": "Identify the symptom you are seeing from the scenarios in the example below.", "step.step_troubleshooting_entra_id_0192E": "Follow the diagnostic checks for the matching scenario in order.", "step.step_troubleshooting_entra_id_07C87": "If the issue is not resolved after completing the checks, contact WithSecure support with the diagnostic details you have gathered.", "content.title_troubleshooting_entra_id_0CFBB": "Common scenarios and diagnostic checks", "content.dt_troubleshooting_entra_id_0E61E": "A security administrator cannot sign in through SSO Federation", "content.dd_troubleshooting_entra_id_02694": "", "content.dd_p_troubleshooting_entra_id_0C75C": "Check the following:
", "step.step_troubleshooting_entra_id_02F08": "Verify that the email domain has been federated and that domain verification completed in Entra ID.", "step.step_troubleshooting_entra_id_0D7DF": "Confirm that the email address in Elements exactly matches the User Principal Name (UPN) in Entra ID for that account. A mismatch causes authentication to fail, even if both accounts exist.", "step.step_troubleshooting_entra_id_0C33F": "If this is the security administrator's first federated sign-in for an existing local account, confirm that they have entered the Elements password once to link the account.", "content.dt_troubleshooting_entra_id_03017": "A user is not appearing in Elements after provisioning", "content.dd_troubleshooting_entra_id_0C744": "", "content.dd_p_troubleshooting_entra_id_09468": "Check the following:
", "step.step_troubleshooting_entra_id_08B80": "Wait a few minutes. The initial sync may take 20 to 40 minutes to complete, and ongoing changes propagate within minutes.", "step.step_troubleshooting_entra_id_03DC8": "Check that provisioning is active in Entra ID and not paused.", "step.step_troubleshooting_entra_id_01C10": "Check the provisioning scope in Entra ID. The user must be either directly assigned to the enterprise application or be a member of an assigned security group.", "step.step_troubleshooting_entra_id_0C939": "Confirm that the user has a populated email attribute in Entra ID. Elements requires the email field to identify users.", "content.dt_troubleshooting_entra_id_0F74A": "A security group is not appearing in Elements after provisioning", "content.dd_troubleshooting_entra_id_0C747": "", "content.dd_p_troubleshooting_entra_id_0CEA8": "Check the following:
", "step.step_troubleshooting_entra_id_06A35": "Wait a few minutes for sync to complete.", "step.step_troubleshooting_entra_id_077B2": "Check the provisioning scope in Entra ID. The security group must be either explicitly assigned or matched by an attribute-based filter.", "step.step_troubleshooting_entra_id_0B8C1": "If you are using an attribute-based filter (for example, displayName starts with a prefix), verify that the security group's name matches the filter pattern.", "content.dt_troubleshooting_entra_id_0FF57": "Group membership in Elements does not match Entra ID", "content.dd_troubleshooting_entra_id_08A3D": "", "content.dd_p_troubleshooting_entra_id_0FB18": "Check the following:
", "step.step_troubleshooting_entra_id_097F6": "Wait a few minutes for sync to complete.", "step.step_troubleshooting_entra_id_098AC": "Verify that the missing members are in the provisioning scope. A user who is a member of a provisioned group in Entra ID but is not in the provisioning scope themselves is not synchronized.", "step.step_troubleshooting_entra_id_0C111": "Check the Entra ID provisioning logs for errors related to the missing users.", "content.dt_troubleshooting_entra_id_0AC13": "A provisioned user or security group cannot be edited or deleted in Elements", "content.dd_troubleshooting_entra_id_0303A": "Provisioned objects are immutable in Elements by design. The name, description, and membership of a provisioned object can only be changed in Entra ID. The only Elements-side state that you can edit for provisioned objects is role assignments.", "content.dt_troubleshooting_entra_id_0EE3A": "Too many users or security groups have been provisioned", "content.dd_troubleshooting_entra_id_0F319": "", "content.dd_p_troubleshooting_entra_id_05512": "Take these steps:
", "step.step_troubleshooting_entra_id_068D4": "Tighten the provisioning scope in Entra ID so that only the intended users and groups are in scope.", "step.step_troubleshooting_entra_id_05CC0": "To remove already-provisioned users and groups that should not have been synchronized, deprovision the integration and reconfigure it with the corrected scope.", "desc": [ "content.p_troubleshooting_entra_id_055CC", { "steps.ul_troubleshooting_entra_id_0E588": [ "step.step_troubleshooting_entra_id_0AE15", "step.step_troubleshooting_entra_id_0EC22" ] }, "content.p_troubleshooting_entra_id_03FBA", { "steps.steps_troubleshooting_entra_id_0CE4F": [ "step.step_troubleshooting_entra_id_0C95A", "step.step_troubleshooting_entra_id_0192E", "step.step_troubleshooting_entra_id_07C87" ] }, "content.title_troubleshooting_entra_id_0CFBB", { "dl.dl_troubleshooting_entra_id_02997": [ { "dlentry.dlentry_troubleshooting_entra_id_05771": [ "content.dt_troubleshooting_entra_id_0E61E", "content.dd_troubleshooting_entra_id_02694", "content.dd_p_troubleshooting_entra_id_0C75C", { "steps.ol_troubleshooting_entra_id_0B5D1": [ "step.step_troubleshooting_entra_id_02F08", "step.step_troubleshooting_entra_id_0D7DF", "step.step_troubleshooting_entra_id_0C33F" ] } ] }, { "dlentry.dlentry_troubleshooting_entra_id_0E31A": [ "content.dt_troubleshooting_entra_id_03017", "content.dd_troubleshooting_entra_id_0C744", "content.dd_p_troubleshooting_entra_id_09468", { "steps.ol_troubleshooting_entra_id_0692A": [ "step.step_troubleshooting_entra_id_08B80", "step.step_troubleshooting_entra_id_03DC8", "step.step_troubleshooting_entra_id_01C10", "step.step_troubleshooting_entra_id_0C939" ] } ] }, { "dlentry.dlentry_troubleshooting_entra_id_0177C": [ "content.dt_troubleshooting_entra_id_0F74A", "content.dd_troubleshooting_entra_id_0C747", "content.dd_p_troubleshooting_entra_id_0CEA8", { "steps.ol_troubleshooting_entra_id_05D00": [ "step.step_troubleshooting_entra_id_06A35", "step.step_troubleshooting_entra_id_077B2", "step.step_troubleshooting_entra_id_0B8C1" ] } ] }, { "dlentry.dlentry_troubleshooting_entra_id_0F97F": [ "content.dt_troubleshooting_entra_id_0FF57", "content.dd_troubleshooting_entra_id_08A3D", "content.dd_p_troubleshooting_entra_id_0FB18", { "steps.ol_troubleshooting_entra_id_0E742": [ "step.step_troubleshooting_entra_id_097F6", "step.step_troubleshooting_entra_id_098AC", "step.step_troubleshooting_entra_id_0C111" ] } ] }, { "dlentry.dlentry_troubleshooting_entra_id_0885A": [ "content.dt_troubleshooting_entra_id_0AC13", "content.dd_troubleshooting_entra_id_0303A" ] }, { "dlentry.dlentry_troubleshooting_entra_id_0F188": [ "content.dt_troubleshooting_entra_id_0EE3A", "content.dd_troubleshooting_entra_id_0F319", "content.dd_p_troubleshooting_entra_id_05512", { "steps.ol_troubleshooting_entra_id_019F1": [ "step.step_troubleshooting_entra_id_068D4", "step.step_troubleshooting_entra_id_05CC0" ] } ] } ] } ], "related": [ "troubleshooting_integration-latest-en" ] }, "limitations_of_entra_id_integration-latest-en.json": { "title": "title_limitations_of_entra_id__0D718", "title_limitations_of_entra_id__0D718": "Limitations of Entra ID integration", "shortdesc": "shortdesc_limitations_of_entra_id__0A979", "shortdesc_limitations_of_entra_id__0A979": "Entra ID integration has several hard constraints that affect how the integration can be configured and what can be changed in Elements after provisioning.", "content.p_limitations_of_entra_id__0A5A0": "Plan and operate Entra ID integration with the following constraints in mind:", "content.dt_limitations_of_entra_id__0766A": "Provisioned objects are immutable in Elements", "content.dd_limitations_of_entra_id__03E8A": "Security administrators, security groups, and security group membership that arrive in Elements through System for Cross-domain Identity Management (SCIM) provisioning cannot be edited or deleted in the Elements portal. The group's name, description, and members can only be changed in Entra ID. The only Elements-side state for provisioned objects is the set of role assignments, which remain editable regardless of the immutability of the underlying object.", "content.dt_limitations_of_entra_id__0AE9A": "Local users cannot be added to provisioned groups", "content.dd_limitations_of_entra_id__099BD": "A locally-invited security administrator cannot be added to a security group that was provisioned from Entra ID, because the membership of a provisioned group is managed exclusively in Entra. The reverse is allowed. A provisioned user can be added to a locally-created security group through the Elements portal.", "content.dt_limitations_of_entra_id__0D364": "Email addresses and Entra UPNs must match", "content.dd_limitations_of_entra_id__02244": "The email address of a security administrator in Elements must match the User Principal Name (UPN) of the corresponding user in Entra ID. A mismatch causes authentication to fail through SSO Federation, even if both accounts exist on their respective sides.", "content.dt_limitations_of_entra_id__05289": "Sync is one-way from Entra to Elements", "content.dd_limitations_of_entra_id__0692B": "Changes made in Entra ID propagate to Elements continuously, typically within minutes. Changes made in Elements do not propagate back to Entra ID. The only Elements-side state that does not have to be mirrored in Entra is role assignments. Everything else (user attributes, group membership, group names) must be changed in Entra.", "content.dt_limitations_of_entra_id__0B0E6": "Provisioning is configured at one organizational level", "content.dd_limitations_of_entra_id__05C43": "SCIM provisioning is typically configured at the top of an organization's hierarchy: the Solution Provider for partners, or the company organization for a company with its own Entra ID tenant. Provisioning the same Entra tenant to multiple organizational levels is technically possible but is not the standard configuration and is prone to misconfiguration.", "desc": [ "content.p_limitations_of_entra_id__0A5A0", { "dl.dl_limitations_of_entra_id__07B0C": [ { "dlentry.dlentry_limitations_of_entra_id__02174": [ "content.dt_limitations_of_entra_id__0766A", "content.dd_limitations_of_entra_id__03E8A" ] }, { "dlentry.dlentry_limitations_of_entra_id__07469": [ "content.dt_limitations_of_entra_id__0AE9A", "content.dd_limitations_of_entra_id__099BD" ] }, { "dlentry.dlentry_limitations_of_entra_id__06D01": [ "content.dt_limitations_of_entra_id__0D364", "content.dd_limitations_of_entra_id__02244" ] }, { "dlentry.dlentry_limitations_of_entra_id__0C686": [ "content.dt_limitations_of_entra_id__05289", "content.dd_limitations_of_entra_id__0692B" ] }, { "dlentry.dlentry_limitations_of_entra_id__00C4F": [ "content.dt_limitations_of_entra_id__0B0E6", "content.dd_limitations_of_entra_id__05C43" ] } ] } ], "related": [ "locally_created_and_provisioned_security_groups-latest-en" ] }, "best_practices_for_entra_id_integration-latest-en.json": { "title": "title_best_practices_for_entra_0C2F6", "title_best_practices_for_entra_0C2F6": "Best practices for Entra ID integration", "shortdesc": "shortdesc_best_practices_for_entra_05ABA", "shortdesc_best_practices_for_entra_05ABA": "These recommendations help organizations deploy Entra ID integration in a way that minimizes Elements portal work and maximizes the automation benefits.", "content.p_best_practices_for_entra_0092B": "Apply these practices when planning and operating Entra ID integration.", "content.dt_best_practices_for_entra_00716": "Configure SSO Federation and SCIM provisioning together", "content.dd_best_practices_for_entra_0FD48": "Both halves of the integration produce the most value when used together. SSO Federation alone gives you delegated authentication but still requires manual identity management. System for Cross-domain Identity Management (SCIM) provisioning depends on SSO Federation and cannot be used without it. Configure both during initial setup for fully automated access management.", "content.dt_best_practices_for_entra_0697D": "Filter aggressively when configuring provisioning", "content.dd_best_practices_for_entra_0D9AC": "An Entra ID tenant typically contains many more users and security groups than need access to Elements. Configure provisioning filters in Entra ID to sync only the users and groups that need Elements access. A common approach is to use a naming convention (for example, an Elements- prefix on security groups intended for Elements integration) and configure Entra to sync only those groups. Aggressive filtering improves sync performance, reduces visual clutter in Elements, and limits the scope of any accidental misconfiguration.", "content.dt_best_practices_for_entra_0D48C": "Provision at the top of the organizational hierarchy", "content.dd_best_practices_for_entra_06400": "Configure provisioning at the Solution Provider organization for partner deployments, or at the company organization for company deployments. This places the synchronized users and groups at the highest scope, where role assignments can use inheritance to reach all lower organizations.", "content.dt_best_practices_for_entra_05EBA": "Define role assignments once, then leave them in place", "content.dd_best_practices_for_entra_055FD": "After provisioning is active, define the role assignments for each provisioned security group in Elements. Once those role assignments are in place, day-to-day onboarding, offboarding, and group-membership changes happen entirely in Entra ID. Revisit Elements role assignments only when access requirements change, when new Elements features become available, or when restructuring the security group design.", "content.p_best_practices_for_entra_071B1": "Once the integration is in place, the recommended operating model has three phases:", "content.dt_best_practices_for_entra_0BCFD": "Initial setup (one-time)", "content.dd_best_practices_for_entra_00070": "Configure SSO Federation, configure SCIM provisioning, set up security groups in Entra ID with appropriate filtering, and define role assignments for those groups in Elements.", "content.dt_best_practices_for_entra_0AEDE": "Day-to-day operations (in Entra ID)", "content.dd_best_practices_for_entra_0B3B4": "Onboard new security administrators by adding them to Entra ID and to the appropriate Entra security groups. Offboard departing security administrators by removing them from the Entra groups or by deleting their Entra accounts. Elements reflects each change automatically, typically within minutes. No action is needed in the Elements portal.", "content.dt_best_practices_for_entra_0BC02": "Maintenance (occasionally in Elements)", "content.dd_best_practices_for_entra_0B3E5": "Adjust role assignments for provisioned security groups when access needs change. Add role assignments for new Elements features released by WithSecure.", "desc": [ "content.p_best_practices_for_entra_0092B", { "dl.dl_best_practices_for_entra_06171": [ { "dlentry.dlentry_best_practices_for_entra_0E3A0": [ "content.dt_best_practices_for_entra_00716", "content.dd_best_practices_for_entra_0FD48" ] }, { "dlentry.dlentry_best_practices_for_entra_095C6": [ "content.dt_best_practices_for_entra_0697D", "content.dd_best_practices_for_entra_0D9AC" ] }, { "dlentry.dlentry_best_practices_for_entra_06377": [ "content.dt_best_practices_for_entra_0D48C", "content.dd_best_practices_for_entra_06400" ] }, { "dlentry.dlentry_best_practices_for_entra_050E8": [ "content.dt_best_practices_for_entra_05EBA", "content.dd_best_practices_for_entra_055FD" ] } ] }, "content.p_best_practices_for_entra_071B1", { "dl.dl_best_practices_for_entra_00A43": [ { "dlentry.dlentry_best_practices_for_entra_00BF6": [ "content.dt_best_practices_for_entra_0BCFD", "content.dd_best_practices_for_entra_00070" ] }, { "dlentry.dlentry_best_practices_for_entra_04AA0": [ "content.dt_best_practices_for_entra_0AEDE", "content.dd_best_practices_for_entra_0B3B4" ] }, { "dlentry.dlentry_best_practices_for_entra_0373D": [ "content.dt_best_practices_for_entra_0BC02", "content.dd_best_practices_for_entra_0B3E5" ] } ] } ] }, "troubleshooting_integration-latest-en.json": { "title": "title_deprovisioning_entra_id__0D1FA", "title_deprovisioning_entra_id__0D1FA": "Deprovision Entra ID integration", "shortdesc": "shortdesc_deprovisioning_entra_id__0BA50", "shortdesc_deprovisioning_entra_id__0BA50": "Disconnect Elements from Microsoft Entra ID so that provisioned users and security groups become local and can be deleted. Disconnecting also lets you reconfigure or fully disable provisioning.", "content.p_deprovisioning_entra_id__08234": "Before you start, make sure you have:", "step.step_deprovisioning_entra_id__0DB03": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role in the organization where provisioning was configured.", "step.step_deprovisioning_entra_id__01F21": "The privileges in Entra ID to modify the System for Cross-domain Identity Management (SCIM) provisioning enterprise application, if you intend to reconfigure provisioning afterwards.", "content.p_deprovisioning_entra_id__08C18": "Use this procedure to fix a misconfigured provisioning setup, switch to a different identity source, or disable Entra ID integration. A misconfigured setup might synchronize too many users or groups.", "content.p_deprovisioning_entra_id__0F081": "The procedure has two phases. The first five steps disconnect Elements from Entra ID and let you remove unwanted provisioned objects. Steps 6 and 7 are optional and are only needed when you intend to continue using Entra ID integration with corrected settings.", "step.step_deprovisioning_entra_id__06410": "Go to Organization Settings > Security Administrators.", "step.step_deprovisioning_entra_id__05092": "Open Configure Identity provisioning.", "content.p_deprovisioning_entra_id__0F6EC": "Entra ID can no longer synchronize changes to Elements. Existing provisioned users and security groups remain in Elements but stay immutable until the next step.", "step.step_deprovisioning_entra_id__06699": "Remove the SCIM client credentials.", "content.p_deprovisioning_entra_id__067DC": "Provisioned users and security groups become local objects in Elements. They can now be deleted, but they cannot be edited.", "step.step_deprovisioning_entra_id__013D5": "Click Deprovision Entra ID.", "content.p_deprovisioning_entra_id__0532D": "Delete only the objects that should not have been provisioned. Any objects that are still needed can stay. When provisioning is reconfigured, Entra ID recognizes them and re-provisions them.", "step.step_deprovisioning_entra_id__02464": "Delete the unwanted users and security groups from Elements.", "step.step_deprovisioning_entra_id__06793": "In Entra ID, update the SCIM provisioning enterprise application with the corrected scope or filters.", "step.step_deprovisioning_entra_id__06A04": "In Elements, return to Configure Identity provisioning and add new client credentials.", "content.p_deprovisioning_entra_id__0FFAD": "If you completed all seven steps, Entra ID resumes synchronization with the corrected scope. Users and security groups that remained in Elements after cleanup are recognized as provisioned again. Any new objects in the updated scope synchronize according to the updated filters.", "content.p_deprovisioning_entra_id__05C82": "If you stopped after step 5, SCIM provisioning is fully disabled. Users and security groups already provisioned remain in Elements as local objects. SSO Federation, if configured, is independent of SCIM provisioning and remains active until disabled separately.", "desc": [ "content.p_deprovisioning_entra_id__08234", { "steps.ul_deprovisioning_entra_id__076ED": [ "step.step_deprovisioning_entra_id__0DB03", "step.step_deprovisioning_entra_id__01F21" ] }, "content.p_deprovisioning_entra_id__08C18", "content.p_deprovisioning_entra_id__0F081", { "steps.steps_deprovisioning_entra_id__06BC3": [ "step.step_deprovisioning_entra_id__06410", "step.step_deprovisioning_entra_id__05092", "step.step_deprovisioning_entra_id__06699", "content.p_deprovisioning_entra_id__0F6EC", "step.step_deprovisioning_entra_id__013D5", "content.p_deprovisioning_entra_id__067DC", "step.step_deprovisioning_entra_id__02464", "content.p_deprovisioning_entra_id__0532D", "step.step_deprovisioning_entra_id__06793", "step.step_deprovisioning_entra_id__06A04" ] }, "content.p_deprovisioning_entra_id__0FFAD", "content.p_deprovisioning_entra_id__05C82" ] }, "migrating_to_elements_rbac-latest-en.json": { "title": "title_migrating_to_elements_rb_06EE9", "title_migrating_to_elements_rb_06EE9": "Migrating to Elements RBAC", "shortdesc": "shortdesc_migrating_to_elements_rb_0A982", "shortdesc_migrating_to_elements_rb_0A982": "Migrating an organization from the previous access management model to Elements RBAC covers pre-migration planning, the migration sequence, and post-migration verification.", "content.p_migrating_to_elements_rb_03D8F": "Migrating to Elements RBAC is a one-time activity per organization. You can perform it in a single maintenance window or gradually over time. After the migration is complete, the ongoing operations are described in the other topics of this guide.", "content.title_migrating_to_elements_rb_076FF": "Who should migrate", "step.step_migrating_to_elements_rb_0F568": "Identity and Access Management (IAM) administrators in partner organizations, typically Managed Service Providers. They migrate their Solution Provider, Service Partners, and customer Companies to Elements RBAC.", "step.step_migrating_to_elements_rb_0753E": "IAM administrators in customer Companies who need to migrate their Company organization to Elements RBAC.", "content.p_migrating_to_elements_rb_03E12": "If you are starting with Elements RBAC for the first time, you do not need to migrate.", "desc": [ "content.p_migrating_to_elements_rb_03D8F", "content.title_migrating_to_elements_rb_076FF", { "steps.ul_migrating_to_elements_rb_0F704": [ "step.step_migrating_to_elements_rb_0F568", "step.step_migrating_to_elements_rb_0753E" ] }, "content.p_migrating_to_elements_rb_03E12" ] }, "understanding_the_migration-latest-en.json": { "title": "title_understanding_the_migrat_0BCD7", "title_understanding_the_migrat_0BCD7": "Understanding the migration", "shortdesc": "shortdesc_understanding_the_migrat_066A2", "shortdesc_understanding_the_migrat_066A2": "Learn what changes when you migrate, the two migration approaches you can choose between, and how reversible the migration is.", "content.p_understanding_the_migrat_0D9FD": "The decisions you make when preparing for migration depend on understanding what will change in your environment and which migration approach fits your team. Understand the migration before you make those decisions.", "desc": [ "content.p_understanding_the_migrat_0D9FD" ] }, "what_changes_when_you_migrate-latest-en.json": { "title": "title_what_changes_when_you_mi_0A402", "title_what_changes_when_you_mi_0A402": "What changes when you migrate", "shortdesc": "shortdesc_what_changes_when_you_mi_0E3ED", "shortdesc_what_changes_when_you_mi_0E3ED": "When you migrate to Elements RBAC, all existing access is preserved, but its structure changes. Partner security administrators no longer need company membership, and direct grants become explicit role assignments.", "content.p_what_changes_when_you_mi_06EFE": "Migrating an organization from the previous access model to Elements RBAC does not change which security administrators have access or what they can do. All existing access is preserved. What changes is how the access is represented in the system and how it can be managed.", "content.title_what_changes_when_you_mi_003D7": "Security administrator memberships", "content.p_what_changes_when_you_mi_0B29F": "In the previous access model, partner security administrators were typically added directly as members of customer Companies to gain explicit (non-inherited) access to those Companies. The membership and the access were the same operation. To have access to a Company, the security administrator had to be a member of that Company. As a result:", "step.step_what_changes_when_you_mi_08DE9": "Partner security administrators appeared in the Company's security administrator list.", "step.step_what_changes_when_you_mi_05C4E": "Company Identity and Access Management (IAM) administrators could see, and could modify the permissions of, partner staff with access to the Company.", "step.step_what_changes_when_you_mi_098D7": "Partner internal staff structure was visible to Company administrators.", "content.p_what_changes_when_you_mi_0589F": "Elements RBAC introduces access without membership: a partner security administrator can have role assignments scoped to a Company without being a member of that Company. The two concepts are decoupled. As a result:", "step.step_what_changes_when_you_mi_01D1C": "Partner security administrators belong only to the Solution Provider organization.", "step.step_what_changes_when_you_mi_0E87F": "Partner security administrators are invisible to Company IAM administrators.", "step.step_what_changes_when_you_mi_0E634": "The partner manages access to the Company through role assignments at the Solution Provider or Service Partner level.", "content.p_what_changes_when_you_mi_0D860": "The migration does not automatically remove partner security administrators from Company memberships. The previous membership-based access continues to work in the new model. Cleanup is recommended and is one of the seven phases of migration.", "content.title_what_changes_when_you_mi_060E3": "Direct role assignments instead of grants", "content.p_what_changes_when_you_mi_07CF8": "In the previous access model, permissions were called grants and were always assigned directly to individual security administrators. Security groups did not exist, and the roles available were less granular than in Elements RBAC.", "content.p_what_changes_when_you_mi_08C80": "During migration, existing grants are converted to direct role assignments. The underlying access is unchanged. The assignments are now visible in the security administrator's Role Assignments tab, and can be managed alongside indirect (group-based) and inherited (hierarchy-based) assignments.", "content.p_what_changes_when_you_mi_0E9A4": "Direct role assignments work but do not scale. Consolidating direct assignments into security groups is recommended after migration to take advantage of group-based management. Change a group's role assignments once, and every member's effective permissions are updated.", "content.title_what_changes_when_you_mi_0F07C": "What is preserved", "content.p_what_changes_when_you_mi_0FA21": "Migration preserves all existing state:", "step.step_what_changes_when_you_mi_0787D": "All existing access: every security administrator retains the permissions they had before migration.", "step.step_what_changes_when_you_mi_07DC9": "All existing security administrator accounts and their organization memberships.", "step.step_what_changes_when_you_mi_07A69": "The organizational hierarchy of Solution Provider, Service Partners, and Companies.", "step.step_what_changes_when_you_mi_0595A": "SSO Federation configuration, if it was set up before migration.", "content.title_what_changes_when_you_mi_0F9C9": "What needs cleanup after migration", "content.p_what_changes_when_you_mi_0A56D": "Two cleanup activities are recommended to take full advantage of Elements RBAC:", "step.step_what_changes_when_you_mi_03A3A": "Remove partner security administrators from Company memberships, granting them access through role assignments instead.", "step.step_what_changes_when_you_mi_0A9D3": "Consolidate direct role assignments into security groups for easier ongoing management.", "content.p_what_changes_when_you_mi_005C9": "Both activities are covered as separate phases in the migration sequence.", "desc": [ "content.p_what_changes_when_you_mi_06EFE", "content.title_what_changes_when_you_mi_003D7", "content.p_what_changes_when_you_mi_0B29F", { "steps.ul_what_changes_when_you_mi_08AE7": [ "step.step_what_changes_when_you_mi_08DE9", "step.step_what_changes_when_you_mi_05C4E", "step.step_what_changes_when_you_mi_098D7" ] }, "content.p_what_changes_when_you_mi_0589F", { "steps.ul_what_changes_when_you_mi_08B64": [ "step.step_what_changes_when_you_mi_01D1C", "step.step_what_changes_when_you_mi_0E87F", "step.step_what_changes_when_you_mi_0E634" ] }, "content.p_what_changes_when_you_mi_0D860", "content.title_what_changes_when_you_mi_060E3", "content.p_what_changes_when_you_mi_07CF8", "content.p_what_changes_when_you_mi_08C80", "content.p_what_changes_when_you_mi_0E9A4", "content.title_what_changes_when_you_mi_0F07C", "content.p_what_changes_when_you_mi_0FA21", { "steps.ul_what_changes_when_you_mi_024CA": [ "step.step_what_changes_when_you_mi_0787D", "step.step_what_changes_when_you_mi_07DC9", "step.step_what_changes_when_you_mi_07A69", "step.step_what_changes_when_you_mi_0595A" ] }, "content.title_what_changes_when_you_mi_0F9C9", "content.p_what_changes_when_you_mi_0A56D", { "steps.ul_what_changes_when_you_mi_02A01": [ "step.step_what_changes_when_you_mi_03A3A", "step.step_what_changes_when_you_mi_0A9D3" ] }, "content.p_what_changes_when_you_mi_005C9" ], "related": [ "removing_partner_security_administrators_from_company_memberships-latest-en", "migrating_from_direct_role_assignments_to_security_groups-latest-en" ] }, "migration_approaches_phased_or_big_bang-latest-en.json": { "title": "title_migration_approaches_pha_00599", "title_migration_approaches_pha_00599": "Migration approaches: phased or single-cutover", "shortdesc": "shortdesc_migration_approaches_pha_00830", "shortdesc_migration_approaches_pha_00830": "You can migrate to Elements RBAC in one coordinated operation (single-cutover, also called big bang) or gradually over time (phased). The choice depends on the size of the deployment and the operational constraints.", "content.p_migration_approaches_pha_002B2": "The two approaches differ in timing, not in outcome. Either approach moves the organization from the previous access model to Elements RBAC and produces the same final state.", "content.dt_migration_approaches_pha_07AF7": "Single-cutover migration", "content.dd_migration_approaches_pha_048C1": "", "content.dd_p_migration_approaches_pha_0AC63": "Turn on RBAC, complete all configuration changes, and finish all cleanup in a single planned window. Configuration changes include security groups, role assignments, and Microsoft Entra ID integration. Cleanup includes removing partner administrators from Company memberships and consolidating direct assignments.
", "content.dd_p_migration_approaches_pha_0599A": "Suitable for:
", "choice.choice_migration_approaches_pha_0F023": "Smaller deployments that can be planned and executed within a short window.", "choice.choice_migration_approaches_pha_007C4": "Organizations with strong change management discipline.", "choice.choice_migration_approaches_pha_07F13": "Cases where a mixed state (some access through groups, some still through direct assignments) is undesirable.", "content.p_migration_approaches_pha_0DD54": "", "content.dt_migration_approaches_pha_0ED82": "Phased migration", "content.dd_migration_approaches_pha_008BF": "", "content.dd_p_migration_approaches_pha_0049A": "Turn on RBAC to make the new operations available, then continue working with the existing access, now represented as direct role assignments. Over weeks or months, gradually create security groups, consolidate assignments, and remove redundant partner memberships.
", "content.dd_p_migration_approaches_pha_0123C": "Suitable for:
", "choice.choice_migration_approaches_pha_0BA3B": "Larger deployments where coordinating a single migration window is impractical.", "choice.choice_migration_approaches_pha_06A56": "Partners managing many customer Companies that will migrate independently.", "choice.choice_migration_approaches_pha_0E378": "Organizations that prefer to validate the new model with a subset of users before extending it.", "content.p_migration_approaches_pha_043FD": "", "content.title_migration_approaches_pha_041AC": "Choosing an approach", "content.p_migration_approaches_pha_0FADE": "Both approaches preserve existing access at every stage, so neither is materially riskier for access continuity. The decision is primarily about operational coordination:", "step.step_migration_approaches_pha_06BE6": "Choose single-cutover if you can schedule a single window for the full migration and you want to operate in a fully consistent state immediately afterwards.", "step.step_migration_approaches_pha_00D86": "Choose phased if you cannot afford a single coordinated window, or if you have many Companies to migrate over time. The intermediate state (where security administrators have both direct role assignments and indirect role assignments through groups) is supported by Elements RBAC.", "content.p_migration_approaches_pha_001CD": "A mixed approach is also possible. For example, a partner can perform a single-cutover migration on their Solution Provider while letting individual Companies migrate at their own pace.", "desc": [ "content.p_migration_approaches_pha_002B2", { "dl.dl_migration_approaches_pha_0615C": [ { "dlentry.dlentry_migration_approaches_pha_019AA": [ "content.dt_migration_approaches_pha_07AF7", "content.dd_migration_approaches_pha_048C1", "content.dd_p_migration_approaches_pha_0AC63", "content.dd_p_migration_approaches_pha_0599A", { "choices.ul_migration_approaches_pha_07055": [ "choice.choice_migration_approaches_pha_0F023", "choice.choice_migration_approaches_pha_007C4", "choice.choice_migration_approaches_pha_07F13" ] }, "content.p_migration_approaches_pha_0DD54" ] }, { "dlentry.dlentry_migration_approaches_pha_0A5FD": [ "content.dt_migration_approaches_pha_0ED82", "content.dd_migration_approaches_pha_008BF", "content.dd_p_migration_approaches_pha_0049A", "content.dd_p_migration_approaches_pha_0123C", { "choices.ul_migration_approaches_pha_06A0A": [ "choice.choice_migration_approaches_pha_0BA3B", "choice.choice_migration_approaches_pha_06A56", "choice.choice_migration_approaches_pha_0E378" ] }, "content.p_migration_approaches_pha_043FD" ] } ] }, "content.title_migration_approaches_pha_041AC", "content.p_migration_approaches_pha_0FADE", { "steps.ul_migration_approaches_pha_075F3": [ "step.step_migration_approaches_pha_06BE6", "step.step_migration_approaches_pha_00D86" ] }, "content.p_migration_approaches_pha_001CD" ] }, "reversibility_of_the_migration-latest-en.json": { "title": "title_reversibility_of_the_mig_0BF50", "title_reversibility_of_the_mig_0BF50": "Reversibility of the migration", "shortdesc": "shortdesc_reversibility_of_the_mig_02CED", "shortdesc_reversibility_of_the_mig_02CED": "The migration to Elements RBAC can be reverted to the previous access model. To revert, you must first remove all configuration that depends on RBAC-specific features.", "content.p_reversibility_of_the_mig_01334": "Elements supports reverting an organization from Elements RBAC back to the previous access model. The revert link is on the Organization Settings > Security Administrators page after RBAC has been turned on.", "content.title_reversibility_of_the_mig_0BFB4": "What must be removed before reverting", "content.p_reversibility_of_the_mig_0A184": "The previous access model does not support the features introduced by Elements RBAC. Before you can revert, the following must be removed:", "step.step_reversibility_of_the_mig_0ECBE": "All security groups in the organization.", "step.step_reversibility_of_the_mig_0A944": "All access that does not depend on organization membership (for example, role assignments where the security administrator is not a member of the target organization).", "content.p_reversibility_of_the_mig_0DE9F": "If RBAC-specific configuration remains, the revert operation is blocked.", "content.title_reversibility_of_the_mig_0413F": "What is preserved after reverting", "content.p_reversibility_of_the_mig_0FE27": "Security administrators and their organization memberships are preserved. Direct role assignments are converted back to the previous grant model. The organizational hierarchy is unchanged.", "content.title_reversibility_of_the_mig_04E6D": "When to consider reverting", "content.p_reversibility_of_the_mig_072EA": "Reverting is intended as a safety mechanism, not a routine operation. Consider it only if:", "step.step_reversibility_of_the_mig_01457": "The migration encountered an operational issue that cannot be resolved within Elements RBAC.", "step.step_reversibility_of_the_mig_0B746": "The organization has not yet started taking advantage of RBAC-specific features and prefers to wait.", "content.p_reversibility_of_the_mig_0011C": "If the migration is well underway (security groups created, access patterns adopted) reverting requires undoing all that work, which is rarely worth it.", "desc": [ "content.p_reversibility_of_the_mig_01334", "content.title_reversibility_of_the_mig_0BFB4", "content.p_reversibility_of_the_mig_0A184", { "steps.ul_reversibility_of_the_mig_0C433": [ "step.step_reversibility_of_the_mig_0ECBE", "step.step_reversibility_of_the_mig_0A944" ] }, "content.p_reversibility_of_the_mig_0DE9F", "content.title_reversibility_of_the_mig_0413F", "content.p_reversibility_of_the_mig_0FE27", "content.title_reversibility_of_the_mig_04E6D", "content.p_reversibility_of_the_mig_072EA", { "steps.ul_reversibility_of_the_mig_0481E": [ "step.step_reversibility_of_the_mig_01457", "step.step_reversibility_of_the_mig_0B746" ] }, "content.p_reversibility_of_the_mig_0011C" ] }, "preparing_for_migration-latest-en.json": { "title": "title_preparing_for_migration_003161", "title_preparing_for_migration_003161": "Preparing for migration", "shortdesc": "shortdesc_preparing_for_migration_00BD10", "shortdesc_preparing_for_migration_00BD10": "Assess your current state, make the pre-migration decisions, and complete the checklist before you turn on RBAC for the first organization.", "content.p_preparing_for_migration_00FB50": "Preparing for migration produces the outputs you need to perform the migration. These outputs are an inventory of current access, decisions about your target structure, and a sequenced plan you can follow.", "desc": [ "content.p_preparing_for_migration_00FB50" ], "related": [ "limitations-latest-en" ] }, "assessing_your_current_state-latest-en.json": { "title": "title_assessing_your_current_s_0D049", "title_assessing_your_current_s_0D049": "Assessing your current state", "shortdesc": "shortdesc_assessing_your_current_s_097BF", "shortdesc_assessing_your_current_s_097BF": "Before you begin the migration, inventory the security administrators, document their current permissions, and assess whether you can integrate with Microsoft Entra ID.", "content.p_assessing_your_current_s_09ACD": "The assessment phase produces the inputs you need for the pre-migration decisions and for the migration sequence itself. Three assessment activities are recommended for every migration.", "content.title_assessing_your_current_s_0637C": "Inventory the security administrators", "content.p_assessing_your_current_s_0EAD2": "Build a complete list of security administrators with access to the organization being migrated. For each one, document:", "step.step_assessing_your_current_s_062DA": "The organizations they currently belong to.", "step.step_assessing_your_current_s_09464": "Whether they are partner staff or Company staff.", "step.step_assessing_your_current_s_035B3": "Whether their account is local or already federated through SSO.", "content.p_assessing_your_current_s_0E0C9": "Identify any partner security administrators who are members of Company organizations. These are candidates for cleanup during the migration. In Elements RBAC, partner staff should belong only to the Solution Provider, with access to Companies granted through role assignments rather than membership.", "content.title_assessing_your_current_s_0220A": "Document the current permissions", "content.p_assessing_your_current_s_0E0B7": "For each security administrator, document the grants (in the previous access model) they currently hold. Group security administrators with identical or similar permissions. These groupings become the basis for the security groups you will create during migration.", "content.p_assessing_your_current_s_04379": "The output of this activity is a mapping from current permissions to planned security groups. For example, five security administrators with the same grants can become members of an SOC Team security group with the corresponding role assignments.", "content.title_assessing_your_current_s_070A2": "Assess Microsoft Entra ID integration", "content.p_assessing_your_current_s_0E564": "Determine whether Entra ID integration is available and applicable for this organization:", "step.step_assessing_your_current_s_08BA3": "Does the organization use Microsoft 365 or have an existing Entra ID tenant?", "step.step_assessing_your_current_s_0D692": "Are there existing Entra security groups that could be reused, or will new groups need to be created in Entra?", "step.step_assessing_your_current_s_01F0C": "Are there compliance requirements that benefit from centralized identity governance?", "content.p_assessing_your_current_s_08BB1": "Entra integration is strongly recommended for partners with existing Entra ID infrastructure and for Companies with more than five security administrators.", "desc": [ "content.p_assessing_your_current_s_09ACD", "content.title_assessing_your_current_s_0637C", "content.p_assessing_your_current_s_0EAD2", { "steps.ul_assessing_your_current_s_0BF33": [ "step.step_assessing_your_current_s_062DA", "step.step_assessing_your_current_s_09464", "step.step_assessing_your_current_s_035B3" ] }, "content.p_assessing_your_current_s_0E0C9", "content.title_assessing_your_current_s_0220A", "content.p_assessing_your_current_s_0E0B7", "content.p_assessing_your_current_s_04379", "content.title_assessing_your_current_s_070A2", "content.p_assessing_your_current_s_0E564", { "steps.ul_assessing_your_current_s_0B42C": [ "step.step_assessing_your_current_s_08BA3", "step.step_assessing_your_current_s_0D692", "step.step_assessing_your_current_s_01F0C" ] }, "content.p_assessing_your_current_s_08BB1" ], "related": [ "microsoft_entra_id_integration-latest-en" ] }, "pre_migration_decisions-latest-en.json": { "title": "title_pre_migration_decisions_00447B", "title_pre_migration_decisions_00447B": "Pre-migration decisions", "shortdesc": "shortdesc_pre_migration_decisions_0025E8", "shortdesc_pre_migration_decisions_0025E8": "Before starting the migration, decide whether to integrate with Microsoft Entra ID, whether to use Service Partners, and which migration approach to follow.", "content.p_pre_migration_decisions_001700": "The outputs of the assessment phase inform three decisions that shape the migration sequence.", "content.title_pre_migration_decisions_003962": "Decide whether to integrate with Microsoft Entra ID", "content.p_pre_migration_decisions_001286": "Full Entra integration uses SSO Federation for authentication and System for Cross-domain Identity Management (SCIM) provisioning for security administrator and group synchronization. It eliminates day-to-day access management in the Elements portal.", "content.dt_pre_migration_decisions_00FD5B": "Yes", "content.dd_pre_migration_decisions_00B9CF": "Recommended for organizations that already use Microsoft 365 or have an Entra ID tenant. The migration sequence will include setting up SSO Federation and SCIM provisioning.", "content.dt_pre_migration_decisions_007443": "No", "content.dd_pre_migration_decisions_00DD9E": "Suitable for small organizations without Microsoft 365 or with team sizes that do not justify the integration setup. Security administrators and security groups will be managed locally in Elements.", "content.title_pre_migration_decisions_000A3F": "Decide how many Service Partners to use (partners only)", "content.p_pre_migration_decisions_0097F2": "Service Partners are recommended sub-organizations that group customer Companies under a Solution Provider, and every migrating partner should have at least one:", "content.dt_pre_migration_decisions_007B8B": "Multiple", "content.dd_pre_migration_decisions_00C524": "Useful for partners managing many Companies with clear segmentation by managing team, industry, service tier, or geography.", "content.dt_pre_migration_decisions_00BDDC": "Single", "content.dd_pre_migration_decisions_003EBD": "Suitable for partners with a small portfolio of Companies or with no clear segmentation. All Companies are grouped under one Service Partner rather than sitting directly under the Solution Provider, preserving the ability to scope IAM Administrator, API Key Management, and Audit Log roles to Companies only.", "content.title_pre_migration_decisions_00BB52": "Decide the migration approach", "content.p_pre_migration_decisions_007708": "Choose between a single coordinated migration or a gradual migration over time:", "content.dt_pre_migration_decisions_00A12D": "Single-cutover", "content.dd_pre_migration_decisions_00C033": "Turn on RBAC, complete all configuration, and finish cleanup in a single window.", "content.dt_pre_migration_decisions_009FF2": "Phased", "content.dd_pre_migration_decisions_009366": "Turn on RBAC and continue working with existing access, then gradually create security groups and remove redundant access.", "desc": [ "content.p_pre_migration_decisions_001700", "content.title_pre_migration_decisions_003962", "content.p_pre_migration_decisions_001286", { "dl.dl_pre_migration_decisions_00B5EE": [ { "dlentry.dlentry_pre_migration_decisions_009867": [ "content.dt_pre_migration_decisions_00FD5B", "content.dd_pre_migration_decisions_00B9CF" ] }, { "dlentry.dlentry_pre_migration_decisions_000485": [ "content.dt_pre_migration_decisions_007443", "content.dd_pre_migration_decisions_00DD9E" ] } ] }, "content.title_pre_migration_decisions_000A3F", "content.p_pre_migration_decisions_0097F2", { "dl.dl_pre_migration_decisions_00E270": [ { "dlentry.dlentry_pre_migration_decisions_009139": [ "content.dt_pre_migration_decisions_007B8B", "content.dd_pre_migration_decisions_00C524" ] }, { "dlentry.dlentry_pre_migration_decisions_00B8AE": [ "content.dt_pre_migration_decisions_00BDDC", "content.dd_pre_migration_decisions_003EBD" ] } ] }, "content.title_pre_migration_decisions_00BB52", "content.p_pre_migration_decisions_007708", { "dl.dl_pre_migration_decisions_000C3E": [ { "dlentry.dlentry_pre_migration_decisions_005590": [ "content.dt_pre_migration_decisions_00A12D", "content.dd_pre_migration_decisions_00C033" ] }, { "dlentry.dlentry_pre_migration_decisions_005B8D": [ "content.dt_pre_migration_decisions_009FF2", "content.dd_pre_migration_decisions_009366" ] } ] } ], "related": [ "best_practices_for_organizations-latest-en", "migration_approaches_phased_or_big_bang-latest-en" ] }, "migration_checklist-latest-en.json": { "title": "title_migration_checklist_0000010041", "title_migration_checklist_0000010041": "Migration checklist", "shortdesc": "shortdesc_migration_checklist_0000020CFB", "shortdesc_migration_checklist_0000020CFB": "Use this checklist to confirm that the assessment and decisions are complete before starting the migration sequence.", "content.p_migration_checklist_00000DAFE7": "Work through the following items before turning on RBAC for the first organization. The checklist consolidates the assessment outputs from assessing your current state and the decision outputs from pre-migration decisions.", "content.title_migration_checklist_00000E1458": "Inventory and documentation", "step.step_migration_checklist_000010E10B": "Complete list of security administrators with their current organization memberships.", "step.step_migration_checklist_0000122FF4": "List of partner security administrators who are members of Company organizations (for post-migration cleanup).", "step.step_migration_checklist_00001482A5": "Documented current permissions for each security administrator.", "step.step_migration_checklist_0000161BED": "Grouping of security administrators with similar permissions into planned security groups.", "step.step_migration_checklist_000018E46D": "Documented role assignments for each planned security group.", "content.title_migration_checklist_00001A864C": "Decisions", "step.step_migration_checklist_00001C5FD1": "Decision on Microsoft Entra ID integration (yes or no).", "step.step_migration_checklist_00001E9B1C": "If using Entra integration: Entra ID tenant prepared, Entra security groups defined with a naming convention (for example, Elements-SOC-Team), and provisioning filters identified.", "step.step_migration_checklist_000021618C": "Decision on Service Partner usage (partners only).", "step.step_migration_checklist_0000233773": "If using Service Partners: planned grouping of Companies under Service Partners.", "step.step_migration_checklist_0000252465": "Decision on migration approach (phased or single-cutover).", "step.step_migration_checklist_000027CF67": "Identified administrator who will perform the migration in each organization. This administrator must hold the Identity and Access Management (IAM) Administrator role or the Elements Editing All role.", "content.title_migration_checklist_000029EDA8": "Communication and scheduling", "step.step_migration_checklist_00002B46CD": "Affected security administrators notified of the upcoming change.", "step.step_migration_checklist_00002D39AB": "Migration window scheduled.", "step.step_migration_checklist_00002F4072": "Verification procedures planned: how you will confirm that access is preserved after each phase.", "desc": [ "content.p_migration_checklist_00000DAFE7", "content.title_migration_checklist_00000E1458", { "steps.ul_migration_checklist_00000FC0A2": [ "step.step_migration_checklist_000010E10B", "step.step_migration_checklist_0000122FF4", "step.step_migration_checklist_00001482A5", "step.step_migration_checklist_0000161BED", "step.step_migration_checklist_000018E46D" ] }, "content.title_migration_checklist_00001A864C", { "steps.ul_migration_checklist_00001B121B": [ "step.step_migration_checklist_00001C5FD1", "step.step_migration_checklist_00001E9B1C", "step.step_migration_checklist_000021618C", "step.step_migration_checklist_0000233773", "step.step_migration_checklist_0000252465", "step.step_migration_checklist_000027CF67" ] }, "content.title_migration_checklist_000029EDA8", { "steps.ul_migration_checklist_00002A14AB": [ "step.step_migration_checklist_00002B46CD", "step.step_migration_checklist_00002D39AB", "step.step_migration_checklist_00002F4072" ] } ], "related": [ "assessing_your_current_state-latest-en", "pre_migration_decisions-latest-en" ] }, "the_migration_sequence-latest-en.json": { "title": "title_the_migration_sequence_0006A5F", "title_the_migration_sequence_0006A5F": "The migration sequence", "shortdesc": "shortdesc_the_migration_sequence_00001C1", "shortdesc_the_migration_sequence_00001C1": "The migration to Elements RBAC follows seven phases in order, starting with turning on RBAC and ending with removing partner security administrators from Company memberships.", "content.p_the_migration_sequence_0007834": "Each phase has its own procedure. The phases are sequential, because each phase depends on the outputs of the phases before it. You can perform them back-to-back in a single-cutover migration, or spread them over time in a phased migration.", "content.p_the_migration_sequence_0000D1D": "Four of the phases are specific to migration. The other three reuse existing procedures: turning on RBAC, setting up Microsoft Entra ID integration, and creating security groups.", "content.dt_the_migration_sequence_000195B": "Turning on RBAC", "content.dd_the_migration_sequence_0007EEE": "RBAC is enabled per organization. Existing access is preserved and converted to direct role assignments, and the new Access Control pages become available.", "content.dt_the_migration_sequence_000EC64": "Reviewing existing access", "content.dd_the_migration_sequence_0007929": "The converted access is inspected to confirm the migration succeeded and to identify cleanup candidates. Examples of cleanup candidates are partner staff in Company memberships and patterns of similar permissions.", "content.dt_the_migration_sequence_000CD63": "Setting up Microsoft Entra ID integration", "content.dd_the_migration_sequence_0000653": "When the planning phase chose Entra integration, SSO Federation and System for Cross-domain Identity Management (SCIM) provisioning are configured. SSO Federation precedes SCIM provisioning, because SCIM provisioning creates federated accounts.", "content.dt_the_migration_sequence_000D891": "Creating security groups for the new model", "content.dd_the_migration_sequence_000601B": "One security group is created per permission profile identified during planning. Groups are either created manually in Elements or synchronized from Entra ID.", "content.dt_the_migration_sequence_0006612": "Migrating from direct role assignments to security groups", "content.dd_the_migration_sequence_000394B": "Roles are assigned to each security group and the corresponding security administrators become members. After this phase, each administrator has both direct role assignments (from migration) and indirect role assignments (through groups).", "content.dt_the_migration_sequence_000AD84": "Removing redundant direct role assignments", "content.dd_the_migration_sequence_000F654": "Direct role assignments that are now covered by indirect assignments through groups are removed. The direct Elements Editing All assignment for the root security administrator is kept.", "content.dt_the_migration_sequence_000502B": "Removing partner security administrators from Company memberships", "content.dd_the_migration_sequence_0006FA4": "Partner staff are removed from Company memberships; their access is now granted through role assignments at the Solution Provider or Service Partner level.", "desc": [ "content.p_the_migration_sequence_0007834", "content.p_the_migration_sequence_0000D1D", { "dl.dl_the_migration_sequence_000EB98": [ { "dlentry.dlentry_the_migration_sequence_000AF23": [ "content.dt_the_migration_sequence_000195B", "content.dd_the_migration_sequence_0007EEE" ] }, { "dlentry.dlentry_the_migration_sequence_00093D8": [ "content.dt_the_migration_sequence_000EC64", "content.dd_the_migration_sequence_0007929" ] }, { "dlentry.dlentry_the_migration_sequence_0002CA3": [ "content.dt_the_migration_sequence_000CD63", "content.dd_the_migration_sequence_0000653" ] }, { "dlentry.dlentry_the_migration_sequence_000DDC0": [ "content.dt_the_migration_sequence_000D891", "content.dd_the_migration_sequence_000601B" ] }, { "dlentry.dlentry_the_migration_sequence_0002745": [ "content.dt_the_migration_sequence_0006612", "content.dd_the_migration_sequence_000394B" ] }, { "dlentry.dlentry_the_migration_sequence_000E842": [ "content.dt_the_migration_sequence_000AD84", "content.dd_the_migration_sequence_000F654" ] }, { "dlentry.dlentry_the_migration_sequence_00024CE": [ "content.dt_the_migration_sequence_000502B", "content.dd_the_migration_sequence_0006FA4" ] } ] } ], "related": [ "enabling_rbac-latest-en", "microsoft_entra_id_integration-2-latest-en", "creating_security_groups-latest-en", "scim_provisioning-latest-en", "reviewing_existing_access_after_turning_on_rbac-latest-en", "migrating_from_direct_role_assignments_to_security_groups-latest-en", "cleaning_up_redundant_direct_role_assignments-latest-en", "removing_partner_security_administrators_from_company_memberships-latest-en" ] }, "performing_the_migration-latest-en.json": { "title": "title_performing_the_migration_0D1D3", "title_performing_the_migration_0D1D3": "Performing the migration", "shortdesc": "shortdesc_performing_the_migration_0B033", "shortdesc_performing_the_migration_0B033": "Complete the migration in the specified order by reviewing access, converting direct assignments into security groups, and removing redundant access.", "content.p_performing_the_migration_027D4": "Perform each task in sequence. Each step depends on the outputs of the previous step, so skipping ahead is likely to produce inconsistent access.", "desc": [ "content.p_performing_the_migration_027D4" ] }, "reviewing_existing_access_after_turning_on_rbac-latest-en.json": { "title": "title_reviewing_existing_acces_0112B", "title_reviewing_existing_acces_0112B": "Review existing access after turning on RBAC", "shortdesc": "shortdesc_reviewing_existing_acces_05878", "shortdesc_reviewing_existing_acces_05878": "Review the security administrators and their converted direct role assignments to confirm the migration succeeded and to identify candidates for cleanup.", "content.p_reviewing_existing_acces_0EACA": "Before you start, make sure you have:", "step.step_reviewing_existing_acces_0D16D": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role in the organization.", "step.step_reviewing_existing_acces_00CA4": "RBAC turned on for the organization.", "content.p_reviewing_existing_acces_05353": "The review activity has three purposes:", "step.step_reviewing_existing_acces_0301B": "Confirm that all expected security administrators are present and that their grants have been converted to direct role assignments.", "step.step_reviewing_existing_acces_0C608": "Identify partner security administrators who are members of Company organizations. These are candidates for the cleanup phase.", "step.step_reviewing_existing_acces_007FF": "Identify patterns of similar permissions across security administrators. These patterns become the basis for the security groups you will create.", "step.step_reviewing_existing_acces_062F4": "Select the organization in the Scope Selector.", "content.p_reviewing_existing_acces_0BC29": "The list of security administrators in the selected organization appears.", "step.step_reviewing_existing_acces_0DA4C": "Go to Access Control > Security Administrators.", "content.p_reviewing_existing_acces_031CC": "If a security administrator is missing or unexpected, investigate before proceeding to later migration phases.", "step.step_reviewing_existing_acces_0599A": "Confirm that the list matches the inventory from the assessment phase.", "content.p_reviewing_existing_acces_0D2CB": "These are candidates for the cleanup phase.", "step.step_reviewing_existing_acces_08C2A": "Note any partner security administrators who appear in Company organization lists.", "content.p_reviewing_existing_acces_0954D": "The converted grants appear as direct role assignments, with member type security administrator.", "step.step_reviewing_existing_acces_0FCBF": "For each security administrator, click the email address and open the Role Assignments tab.", "content.p_reviewing_existing_acces_0B48C": "The groupings are the basis for the security groups you create for the new model.", "step.step_reviewing_existing_acces_08BC0": "Document the role assignments for each security administrator and identify groups of administrators with similar assignments.", "content.p_reviewing_existing_acces_0329B": "You have confirmed that the migration is in a correct state and have produced two artifacts for the next phases:", "step.step_reviewing_existing_acces_0DDAB": "A list of partner security administrators in Company memberships (for the cleanup phase).", "step.step_reviewing_existing_acces_00CC2": "A grouping of security administrators by similar permissions (for the security group creation phase).", "desc": [ "content.p_reviewing_existing_acces_0EACA", { "steps.ul_reviewing_existing_acces_0E7E3": [ "step.step_reviewing_existing_acces_0D16D", "step.step_reviewing_existing_acces_00CA4" ] }, "content.p_reviewing_existing_acces_05353", { "steps.ul_reviewing_existing_acces_05C81": [ "step.step_reviewing_existing_acces_0301B", "step.step_reviewing_existing_acces_0C608", "step.step_reviewing_existing_acces_007FF" ] }, { "steps.steps_reviewing_existing_acces_0BEE0": [ "step.step_reviewing_existing_acces_062F4", "step.step_reviewing_existing_acces_0DA4C", "content.p_reviewing_existing_acces_0BC29", "step.step_reviewing_existing_acces_0599A", "content.p_reviewing_existing_acces_031CC", "step.step_reviewing_existing_acces_08C2A", "content.p_reviewing_existing_acces_0D2CB", "step.step_reviewing_existing_acces_0FCBF", "content.p_reviewing_existing_acces_0954D", "step.step_reviewing_existing_acces_08BC0", "content.p_reviewing_existing_acces_0B48C" ] }, "content.p_reviewing_existing_acces_0329B", { "steps.ul_reviewing_existing_acces_0E155": [ "step.step_reviewing_existing_acces_0DDAB", "step.step_reviewing_existing_acces_00CC2" ] } ], "related": [ "creating_security_groups-latest-en", "removing_partner_security_administrators_from_company_memberships-latest-en" ] }, "migrating_from_direct_role_assignments_to_security_groups-latest-en.json": { "title": "title_migrating_from_direct_ro_065B4", "title_migrating_from_direct_ro_065B4": "Migrate from direct role assignments to security groups", "shortdesc": "shortdesc_migrating_from_direct_ro_0B39F", "shortdesc_migrating_from_direct_ro_0B39F": "Assign roles to the security groups you created, and add security administrators to the appropriate groups, so that each administrator's permissions come from group membership.", "content.p_migrating_from_direct_ro_06468": "Before you start, make sure you have:", "step.step_migrating_from_direct_ro_0BFF4": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role in the organization.", "step.step_migrating_from_direct_ro_0A544": "The security groups already created in Elements (locally-created or Entra-provisioned).", "content.p_migrating_from_direct_ro_0AA82": "This phase moves the permission management from direct role assignments (per security administrator) to indirect role assignments through security groups. After this phase, each security administrator has both direct role assignments (from the migration) and indirect role assignments through their security group memberships. The direct assignments are then redundant and are removed in the next phase.", "content.p_migrating_from_direct_ro_0917E": "Use the role assignment mapping from the planning phase.", "step.step_migrating_from_direct_ro_03429": "For each security group, assign the roles that match the group's intended permission profile.", "subchoice.choice_migrating_from_direct_ro_0F43F": "For locally-managed groups, add members in Elements.", "subchoice.choice_migrating_from_direct_ro_047C9": "For Entra-provisioned groups, add the security administrators to the corresponding Entra groups. System for Cross-domain Identity Management (SCIM) provisioning synchronizes the membership to Elements.", "content.p_migrating_from_direct_ro_006EC": "", "step.step_migrating_from_direct_ro_0B038": "Add the corresponding security administrators to each security group.", "content.p_migrating_from_direct_ro_08259": "Use the Check Access feature.", "step.step_migrating_from_direct_ro_087EE": "Verify that each security administrator has the expected effective access through group membership.", "content.p_migrating_from_direct_ro_09ECC": "Each security administrator now has the same permissions as before, expressed both as direct role assignments (from the migration) and as indirect role assignments through security group membership. The direct assignments are now redundant and can be removed.", "desc": [ "content.p_migrating_from_direct_ro_06468", { "steps.ul_migrating_from_direct_ro_09A4E": [ "step.step_migrating_from_direct_ro_0BFF4", "step.step_migrating_from_direct_ro_0A544" ] }, "content.p_migrating_from_direct_ro_0AA82", { "steps.steps_migrating_from_direct_ro_03C61": [ "step.step_migrating_from_direct_ro_03429", "content.p_migrating_from_direct_ro_0917E", "step.step_migrating_from_direct_ro_0B038", "content.p_migrating_from_direct_ro_006EC", { "subchoices.ul_migrating_from_direct_ro_0E510": [ "subchoice.choice_migrating_from_direct_ro_0F43F", "subchoice.choice_migrating_from_direct_ro_047C9" ] }, "step.step_migrating_from_direct_ro_087EE", "content.p_migrating_from_direct_ro_08259" ] }, "content.p_migrating_from_direct_ro_09ECC" ], "related": [ "assigning_roles_to_security_groups_member_first_approach-latest-en", "adding_a_security_administrator_to_security_group_manually-latest-en", "checking_effective_roles_for_a_user-latest-en", "verifying_access_after_migration-latest-en" ] }, "cleaning_up_redundant_direct_role_assignments-latest-en.json": { "title": "title_cleaning_up_redundant_di_0DC06", "title_cleaning_up_redundant_di_0DC06": "Remove redundant direct role assignments", "shortdesc": "shortdesc_cleaning_up_redundant_di_00345", "shortdesc_cleaning_up_redundant_di_00345": "Remove direct role assignments that are now redundant because the same permissions are granted through security group membership.", "content.p_cleaning_up_redundant_di_07ECB": "Before you start, make sure you have:", "step.step_cleaning_up_redundant_di_02755": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role in the organization.", "step.step_cleaning_up_redundant_di_07F4B": "The previous phase complete, so that each security administrator has indirect role assignments through security group membership that cover the permissions they need.", "content.p_cleaning_up_redundant_di_05179": "After the previous phase, each security administrator has both direct role assignments (from the migration) and indirect role assignments through security groups. The direct assignments are now redundant and add unnecessary complexity to permission management. This phase removes them.", "content.note_cleaning_up_redundant_di_0CC54": "Important: Keep the direct Elements Editing All role assignment for the root security administrator in each organization. This direct assignment prevents accidental lockout if security group membership becomes corrupted.", "step.step_cleaning_up_redundant_di_04647": "Go to Access Control > Security Administrators.", "content.p_cleaning_up_redundant_di_01C01": "The tab shows direct, indirect, and inherited assignments. Direct assignments have member type security administrator.", "step.step_cleaning_up_redundant_di_07049": "Click the email of a security administrator and open the Role Assignments tab.", "step.step_cleaning_up_redundant_di_02756": "Compare the direct role assignments with the indirect role assignments and identify which direct assignments are now covered by indirect ones.", "content.p_cleaning_up_redundant_di_0CAEF": "Do not delete the direct Elements Editing All assignment for the root security administrator.", "step.step_cleaning_up_redundant_di_05EE0": "Select the redundant direct role assignments and click Delete Assignments.", "step.step_cleaning_up_redundant_di_058BC": "Use the Check Access feature to confirm that the security administrator still has the same effective access through indirect assignments.", "step.step_cleaning_up_redundant_di_0C092": "Repeat for each security administrator.", "content.p_cleaning_up_redundant_di_0C756": "Each security administrator's permissions now come from security group membership only, except for the root security administrator's direct Elements Editing All assignment. The permission model is fully consolidated and easier to maintain.", "desc": [ "content.p_cleaning_up_redundant_di_07ECB", { "steps.ul_cleaning_up_redundant_di_00103": [ "step.step_cleaning_up_redundant_di_02755", "step.step_cleaning_up_redundant_di_07F4B" ] }, "content.p_cleaning_up_redundant_di_05179", "content.note_cleaning_up_redundant_di_0CC54", { "steps.steps_cleaning_up_redundant_di_0954B": [ "step.step_cleaning_up_redundant_di_04647", "step.step_cleaning_up_redundant_di_07049", "content.p_cleaning_up_redundant_di_01C01", "step.step_cleaning_up_redundant_di_02756", "step.step_cleaning_up_redundant_di_05EE0", "content.p_cleaning_up_redundant_di_0CAEF", "step.step_cleaning_up_redundant_di_058BC", "step.step_cleaning_up_redundant_di_0C092" ] }, "content.p_cleaning_up_redundant_di_0C756" ], "related": [ "checking_effective_roles_for_a_user-latest-en" ] }, "removing_partner_security_administrators_from_company_memberships-latest-en.json": { "title": "title_removing_partner_securit_0CC39", "title_removing_partner_securit_0CC39": "Remove partner security administrators from company memberships", "shortdesc": "shortdesc_removing_partner_securit_0F8C8", "shortdesc_removing_partner_securit_0F8C8": "Remove partner security administrators from Company memberships to keep partner staff managed solely by the Solution Provider, invisible to Company Identity and Access Management (IAM) administrators.", "content.p_removing_partner_securit_02D47": "Before you start, make sure you have:", "step.step_removing_partner_securit_033CE": "The IAM Administrator role or the Elements Editing All role in the partner organization and in the Company organization.", "step.step_removing_partner_securit_0F2A5": "Role assignments in place for each partner security administrator that grant the access they currently have through Company membership. These role assignments can come either through partner security group assignments or through direct role assignments from the Solution Provider.", "content.p_removing_partner_securit_01E37": "This is the final phase of the migration. In the previous access model, partner staff were typically added as members of Company organizations to gain explicit access. In Elements RBAC, partner staff should belong only to the Solution Provider, with access to Companies granted through role assignments.", "content.note_removing_partner_securit_02C5E": "Important: Before removing each partner security administrator from a Company membership, verify with the Check Access feature that they have the equivalent access through role assignments. Removing the membership before establishing role-assignment-based access will revoke the administrator's access to the Company.", "step.step_removing_partner_securit_0984B": "Select the Company in the Scope Selector.", "content.p_removing_partner_securit_0F5B2": "The list of security administrators who are members of this Company appears.", "step.step_removing_partner_securit_0790D": "Go to Access Control > Security Administrators.", "content.p_removing_partner_securit_0B18A": "Use the inventory from the review phase. Partner security administrators are those who belong to the Solution Provider organization in addition to this Company.", "step.step_removing_partner_securit_0A815": "Identify the partner security administrators in the list, those who should belong only to the Solution Provider.", "step.step_removing_partner_securit_0F287": "For each partner security administrator, use the Check Access feature to confirm that they have role-assignment-based access to the Company.", "step.step_removing_partner_securit_0D3F0": "If a partner security administrator does not have role-assignment-based access, configure it before continuing. Either add them to a partner security group that has role assignments to the Company, or assign them directly from the Solution Provider.", "content.p_removing_partner_securit_08FFE": "The selected security administrators are removed from this Company's membership. They remain members of the Solution Provider and retain access to the Company through role assignments.", "step.step_removing_partner_securit_062BC": "Select the partner security administrators that are confirmed to have alternative access, and click Remove from Organization.", "step.step_removing_partner_securit_070DE": "Confirm that the partner security administrators no longer appear in the Company's security administrator list. Then use the Check Access feature from the Company context to confirm that they still have the expected access.", "step.step_removing_partner_securit_0D6B5": "Repeat for each Company that has partner security administrators in its memberships.", "content.p_removing_partner_securit_02E16": "Partner security administrators no longer appear in Company memberships. Company IAM administrators can manage their Company's security administrators without seeing partner internal staff. Partner staff continue to manage the Company through role assignments at the Solution Provider or Service Partner level.", "content.p_removing_partner_securit_07590": "This completes the migration to Elements RBAC.", "desc": [ "content.p_removing_partner_securit_02D47", { "steps.ul_removing_partner_securit_0F80E": [ "step.step_removing_partner_securit_033CE", "step.step_removing_partner_securit_0F2A5" ] }, "content.p_removing_partner_securit_01E37", "content.note_removing_partner_securit_02C5E", { "steps.steps_removing_partner_securit_02C9C": [ "step.step_removing_partner_securit_0984B", "step.step_removing_partner_securit_0790D", "content.p_removing_partner_securit_0F5B2", "step.step_removing_partner_securit_0A815", "content.p_removing_partner_securit_0B18A", "step.step_removing_partner_securit_0F287", "step.step_removing_partner_securit_0D3F0", "step.step_removing_partner_securit_062BC", "content.p_removing_partner_securit_08FFE", "step.step_removing_partner_securit_070DE", "step.step_removing_partner_securit_0D6B5" ] }, "content.p_removing_partner_securit_02E16", "content.p_removing_partner_securit_07590" ], "related": [ "checking_effective_roles_for_a_user-latest-en" ] }, "verifying_the_migration-latest-en.json": { "title": "title_verifying_the_migration_004F03", "title_verifying_the_migration_004F03": "Verifying the migration", "shortdesc": "shortdesc_verifying_the_migration_00E38D", "shortdesc_verifying_the_migration_00E38D": "After completing the migration sequence, verify that all security administrators have the expected effective access and that cleanup is complete.", "content.p_verifying_the_migration_0034AB": "The migration preserves existing access at every phase, but verification is recommended after the migration sequence is complete. Verification confirms that the new access model produces the same effective permissions as the previous model. It also confirms that the cleanup activities did not unintentionally remove necessary access.", "content.title_verifying_the_migration_004CCF": "What to verify", "content.dt_verifying_the_migration_00E497": "Effective access for each security administrator", "content.dd_verifying_the_migration_007EF2": "Compare each security administrator's current effective access against the inventory from the assessment phase. The access should be identical except where you deliberately changed it during migration.", "content.dt_verifying_the_migration_00A75F": "Security group membership", "content.dd_verifying_the_migration_00F97E": "Each security administrator should be a member of the security groups that grant their required permissions. For Entra-provisioned groups, confirm that the synchronization is current.", "content.dt_verifying_the_migration_00B2DE": "Cleanup completeness", "content.dd_verifying_the_migration_0057AC": "For partner organizations, confirm that no partner security administrators remain in Company memberships, except where intentionally kept. For all organizations, confirm that direct role assignments have been removed where the same permissions are available through security groups. The exception is the root security administrator's direct Elements Editing All assignment.", "content.dt_verifying_the_migration_00C9DA": "SSO and SCIM integration (if configured)", "content.dd_verifying_the_migration_00E1F9": "Confirm that SSO Federation works for federated security administrators. Also confirm that System for Cross-domain Identity Management (SCIM) provisioning synchronizes security administrators and security groups between Entra ID and Elements.", "content.title_verifying_the_migration_006EBE": "Verification tools", "content.p_verifying_the_migration_0095BA": "Elements provides two key tools for verification:", "content.dt_verifying_the_migration_00789A": "Check Access", "content.dd_verifying_the_migration_00BC9C": "Shows the complete effective access for a security administrator in a selected organization, combining direct, indirect, and inherited role assignments. Use this to confirm equivalence with pre-migration access.", "content.dt_verifying_the_migration_00D2FD": "Role Assignments tab", "content.dd_verifying_the_migration_00234F": "Shows the full set of role assignments for a security administrator or security group, with member type and organization scope. Use this to inspect specific assignments.", "content.title_verifying_the_migration_00271F": "When to verify", "content.p_verifying_the_migration_00F168": "For a single-cutover migration, verify after the final phase is complete. For a phased migration, verify after each phase that affects access. This typically means after migrating to group-based permissions, after the cleanup phase, and after removing partner staff from Company memberships.", "desc": [ "content.p_verifying_the_migration_0034AB", "content.title_verifying_the_migration_004CCF", { "dl.dl_verifying_the_migration_00449A": [ { "dlentry.dlentry_verifying_the_migration_0085CC": [ "content.dt_verifying_the_migration_00E497", "content.dd_verifying_the_migration_007EF2" ] }, { "dlentry.dlentry_verifying_the_migration_009745": [ "content.dt_verifying_the_migration_00A75F", "content.dd_verifying_the_migration_00F97E" ] }, { "dlentry.dlentry_verifying_the_migration_00CD30": [ "content.dt_verifying_the_migration_00B2DE", "content.dd_verifying_the_migration_0057AC" ] }, { "dlentry.dlentry_verifying_the_migration_0043A1": [ "content.dt_verifying_the_migration_00C9DA", "content.dd_verifying_the_migration_00E1F9" ] } ] }, "content.title_verifying_the_migration_006EBE", "content.p_verifying_the_migration_0095BA", { "dl.dl_verifying_the_migration_001E15": [ { "dlentry.dlentry_verifying_the_migration_003305": [ "content.dt_verifying_the_migration_00789A", "content.dd_verifying_the_migration_00BC9C" ] }, { "dlentry.dlentry_verifying_the_migration_003633": [ "content.dt_verifying_the_migration_00D2FD", "content.dd_verifying_the_migration_00234F" ] } ] }, "content.title_verifying_the_migration_00271F", "content.p_verifying_the_migration_00F168" ] }, "verifying_access_after_migration-latest-en.json": { "title": "title_verifying_access_after_m_041DA", "title_verifying_access_after_m_041DA": "Verify access after migration", "shortdesc": "shortdesc_verifying_access_after_m_05093", "shortdesc_verifying_access_after_m_05093": "Use the Check Access feature to confirm that each security administrator has the same effective access after the migration as they had before.", "content.p_verifying_access_after_m_00104": "Before you start, make sure you have:", "step.step_verifying_access_after_m_0242C": "The Identity and Access Management (IAM) Administrator role or the Elements Editing All role in the organization where you are verifying.", "step.step_verifying_access_after_m_09836": "The migration sequence, or the phase you are verifying, complete.", "step.step_verifying_access_after_m_07585": "The pre-migration permission inventory from the assessment phase.", "content.p_verifying_access_after_m_0D6DE": "This task uses the Check Access feature to compare a security administrator's current effective access with the access they had before migration. Repeat the task for each security administrator, or for a representative sample if the team is large.", "step.step_verifying_access_after_m_0DB07": "Select the organization in the Scope Selector.", "step.step_verifying_access_after_m_016DA": "Go to Access Control > Role Assignments.", "step.step_verifying_access_after_m_0F1A1": "Click the Check Access link in the header.", "content.p_verifying_access_after_m_05DED": "The effective role assignments for the security administrator in this organization appear, including direct, indirect (through security groups), and inherited (from parent organizations) assignments.", "step.step_verifying_access_after_m_0E829": "Enter the email address of the security administrator you are verifying, and click Next.", "content.p_verifying_access_after_m_06195": "The access should be the same. If the migration was supposed to add or remove access (for example, by removing redundant direct assignments) check that those changes match the intended outcome.", "step.step_verifying_access_after_m_0BA62": "Compare the effective access against the inventory from the assessment phase.", "step.step_verifying_access_after_m_0362A": "If the access differs from the expected outcome, investigate the cause.", "step.step_verifying_access_after_m_0DC5D": "Repeat for each security administrator, or for a representative sample.", "content.p_verifying_access_after_m_0470B": "Each verified security administrator's effective access matches the expected migration outcome. Any differences that were found and investigated are fixed.", "desc": [ "content.p_verifying_access_after_m_00104", { "steps.ul_verifying_access_after_m_094AF": [ "step.step_verifying_access_after_m_0242C", "step.step_verifying_access_after_m_09836", "step.step_verifying_access_after_m_07585" ] }, "content.p_verifying_access_after_m_0D6DE", { "steps.steps_verifying_access_after_m_06FA5": [ "step.step_verifying_access_after_m_0DB07", "step.step_verifying_access_after_m_016DA", "step.step_verifying_access_after_m_0F1A1", "step.step_verifying_access_after_m_0E829", "content.p_verifying_access_after_m_05DED", "step.step_verifying_access_after_m_0BA62", "content.p_verifying_access_after_m_06195", "step.step_verifying_access_after_m_0362A", "step.step_verifying_access_after_m_0DC5D" ] }, "content.p_verifying_access_after_m_0470B" ], "related": [ "common_migration_issues-latest-en" ] }, "common_migration_issues-latest-en.json": { "title": "title_common_migration_issues_000932", "title_common_migration_issues_000932": "Common migration issues", "shortdesc": "shortdesc_common_migration_issues_00D065", "shortdesc_common_migration_issues_00D065": "Common issues encountered during or after migration include unexpected access changes, role assignments that cannot be removed, and synchronization problems with Microsoft Entra ID.", "content.p_common_migration_issues_00CE72": "If verification reveals an issue, the cause is usually one of the patterns described below.", "content.title_common_migration_issues_003E30": "A security administrator does not have expected access", "content.p_common_migration_issues_00024B": "Possible causes:", "step.step_common_migration_issues_004938": "The administrator is not a member of the security group that grants the access. Check the security group membership and add the administrator if necessary.", "step.step_common_migration_issues_0023EE": "The security group does not have the expected role assignment. Check the group's Role Assignments tab.", "step.step_common_migration_issues_00295B": "The role assignment was made at a Company level, but the administrator needs access to a different Company. Add a role assignment at the correct scope.", "step.step_common_migration_issues_0020CD": "For Entra-provisioned groups, the Entra synchronization may be delayed. Wait for the next sync, or trigger one manually.", "content.p_common_migration_issues_00F8B1": "Use the Check Access feature to see the complete effective access and identify which assignments are missing.", "content.title_common_migration_issues_00BCB3": "A security administrator has unexpected access", "content.p_common_migration_issues_00A773": "Possible causes:", "step.step_common_migration_issues_00749E": "The administrator is a member of a security group that grants the unexpected role. Review the group's role assignments.", "step.step_common_migration_issues_005417": "The administrator inherits the access from a role assignment at a parent organization. Inherited assignments cannot be removed at the child level. Go to the parent organization to remove them.", "step.step_common_migration_issues_00D816": "A direct role assignment was not removed during cleanup. Remove it from the security administrator's Role Assignments tab.", "content.title_common_migration_issues_00F450": "A role assignment cannot be removed", "content.p_common_migration_issues_001FD4": "Three types of role assignment cannot be removed from the security administrator's Role Assignments tab:", "step.step_common_migration_issues_00407E": "Indirect role assignments (from a security group) cannot be removed directly. They are removed by removing the security administrator from the group, or by removing the role assignment from the group.", "step.step_common_migration_issues_008D3B": "Inherited role assignments (from a parent organization) can only be removed at the parent organization.", "step.step_common_migration_issues_00B10F": "Provisioned group role assignments must be managed by removing the group in Entra ID, since the Entra-provisioned group is immutable in Elements.", "content.title_common_migration_issues_00606E": "Partner security administrators are still visible to Company administrators after cleanup", "content.p_common_migration_issues_0023D3": "If a partner administrator still appears in a Company's security administrator list after the cleanup phase:", "step.step_common_migration_issues_001B7C": "The administrator may still be a member of the Company organization. Re-run the cleanup procedure for that Company.", "step.step_common_migration_issues_00CE6C": "If the partner administrator was added back to the Company through an invitation, remove them again.", "content.title_common_migration_issues_009050": "Microsoft Entra ID synchronization is not working", "content.p_common_migration_issues_00A21F": "If provisioned security administrators or groups do not appear in Elements as expected:", "step.step_common_migration_issues_00CD8E": "Verify in Microsoft Entra ID that the Enterprise Application provisioning is enabled and that the connection test succeeds.", "step.step_common_migration_issues_008FD6": "Confirm that the provisioning filters match the names of the Entra security groups you expect to synchronize.", "step.step_common_migration_issues_008E57": "Check that each Entra user has the email field populated.", "step.step_common_migration_issues_003D3D": "Initial synchronization can take 20 to 40 minutes after activation.", "content.title_common_migration_issues_0000FB": "The role assignment limit is reached", "content.p_common_migration_issues_002830": "If you cannot add a new role assignment because the per-security-administrator or per-security-group limit has been reached:", "step.step_common_migration_issues_00913E": "Use inheritance instead of repeating the same role assignment at each Company. A single assignment at the Solution Provider or Service Partner level applies to all descendant organizations.", "step.step_common_migration_issues_006844": "Consolidate direct user assignments into security groups.", "step.step_common_migration_issues_00A164": "Remove redundant or obsolete role assignments.", "desc": [ "content.p_common_migration_issues_00CE72", "content.title_common_migration_issues_003E30", "content.p_common_migration_issues_00024B", { "steps.ul_common_migration_issues_000F25": [ "step.step_common_migration_issues_004938", "step.step_common_migration_issues_0023EE", "step.step_common_migration_issues_00295B", "step.step_common_migration_issues_0020CD" ] }, "content.p_common_migration_issues_00F8B1", "content.title_common_migration_issues_00BCB3", "content.p_common_migration_issues_00A773", { "steps.ul_common_migration_issues_00D39A": [ "step.step_common_migration_issues_00749E", "step.step_common_migration_issues_005417", "step.step_common_migration_issues_00D816" ] }, "content.title_common_migration_issues_00F450", "content.p_common_migration_issues_001FD4", { "steps.ul_common_migration_issues_002A42": [ "step.step_common_migration_issues_00407E", "step.step_common_migration_issues_008D3B", "step.step_common_migration_issues_00B10F" ] }, "content.title_common_migration_issues_00606E", "content.p_common_migration_issues_0023D3", { "steps.ul_common_migration_issues_00275F": [ "step.step_common_migration_issues_001B7C", "step.step_common_migration_issues_00CE6C" ] }, "content.title_common_migration_issues_009050", "content.p_common_migration_issues_00A21F", { "steps.ul_common_migration_issues_008F76": [ "step.step_common_migration_issues_00CD8E", "step.step_common_migration_issues_008FD6", "step.step_common_migration_issues_008E57", "step.step_common_migration_issues_003D3D" ] }, "content.title_common_migration_issues_0000FB", "content.p_common_migration_issues_002830", { "steps.ul_common_migration_issues_0032DB": [ "step.step_common_migration_issues_00913E", "step.step_common_migration_issues_006844", "step.step_common_migration_issues_00A164" ] } ], "related": [ "limitations-latest-en", "troubleshooting_entra_id_integration-latest-en" ] }, "reference_intro-latest-en.json": { "title": "title_reference_intro_000001_F9A943B", "title_reference_intro_000001_F9A943B": "RBAC reference", "shortdesc": "shortdesc_reference_intro_000002_0E7883E", "shortdesc_reference_intro_000002_0E7883E": "Use these tables and definitions when you need details on roles, system limits, or terminology.", "content.p_reference_intro_000010_8F56FF2": "The role catalogue lists every Elements role and the permissions it grants. The system limits topic gives the per-account and per-organization quotas you should plan against. The glossary defines the RBAC terms used throughout the guide.", "desc": [ "content.p_reference_intro_000010_8F56FF2" ] }, "roles_and_permissions-latest-en.json": { "title": "title_role_catalogue_000001_31624C06", "title_role_catalogue_000001_31624C06": "Role catalogue", "shortdesc": "shortdesc_role_catalogue_000002_E7327190", "shortdesc_role_catalogue_000002_E7327190": "Elements RBAC organizes roles by capability and permission level, from broad access to precise control of specific features.", "content.title_role_catalogue_000012_336A1128": "Large-scope roles", "content.p_role_catalogue_000013_71EDCA5D": "Large-scope roles are continuously maintained by WithSecure. When new features are added to Elements, these roles automatically include appropriate permissions.", "content.title_role_catalogue_000015_0AB52130": "Large-scope roles", "cell.entry_role_catalogue_00001C_5FFAF24A": "Role name", "cell.entry_role_catalogue_00001E_CD787D9C": "Description", "cell.entry_role_catalogue_000020_F3732F85": "Use case", "cell.entry_role_catalogue_000024_0C64782F": "Elements Editing All", "cell.entry_role_catalogue_000026_CAB222F4": "Full editing access to all current and future features", "cell.entry_role_catalogue_000028_1E37F271": "Root accounts, administrators, full access users", "cell.entry_role_catalogue_00002B_68353B4A": "Elements Reading All", "cell.entry_role_catalogue_00002D_3B6594BA": "Read-only access to all current and future features", "cell.entry_role_catalogue_00002F_565178D2": "Executive dashboards, auditors, read-only monitoring", "content.note_role_catalogue_000031_6F365067": "Note: Large-scope roles cannot be decomposed. You cannot exclude Identity and Access Management (IAM) from an Elements Editing All assignment or exclude specific capabilities from a large-scope role. If you need selective access, use granular roles instead.", "content.title_role_catalogue_000033_43E0E75F": "Granular roles by capability", "content.p_role_catalogue_000034_4CC50508": "Granular roles provide precise control over specific feature areas. They are static and do not automatically expand when new features are added.", "content.title_role_catalogue_000035_E9C253A7": "Exposure Management (XM)", "cell.entry_role_catalogue_00003C_3B2D2A27": "Subcategory", "cell.entry_role_catalogue_00003E_79C411C4": "Access level", "cell.entry_role_catalogue_000040_EBADF50C": "Description", "cell.entry_role_catalogue_000044_2093C8B9": "Exposure", "cell.entry_role_catalogue_000046_2662194C": "Editing", "cell.entry_role_catalogue_000048_14862C06": "Full access to Exposure Management: Environment, Security configurations, Management, Reports, and Cloud onboarding", "cell.entry_role_catalogue_00004B_06829197": "Vulnerabilities", "cell.entry_role_catalogue_00004D_444C4DAB": "Management", "cell.entry_role_catalogue_00004F_7C09956B": "Full access to use and manage the Vulnerability Management system", "cell.entry_role_catalogue_000052_4E30EDF7": "Vulnerabilities", "cell.entry_role_catalogue_000054_794ED1C6": "Editing", "cell.entry_role_catalogue_000056_3BDE16CD": "Full access to Vulnerability Management views, settings, and findings without system management permissions", "cell.entry_role_catalogue_000059_73B1A8E9": "Vulnerabilities", "cell.entry_role_catalogue_00005B_1DE70FA7": "Reading", "cell.entry_role_catalogue_00005D_8F508414": "View-only access to Vulnerability Management", "cell.entry_role_catalogue_000060_AFDB8B13": "Vulnerabilities", "cell.entry_role_catalogue_000062_831879EB": "Discovery scans reading", "cell.entry_role_catalogue_000064_65847444": "View discovery scans for hosts and networks and their results", "cell.entry_role_catalogue_000067_85B14E0D": "Vulnerabilities", "cell.entry_role_catalogue_000069_CC410208": "Discovery scans editing", "cell.entry_role_catalogue_00006B_A0550A0C": "View and manage discovery scans for hosts and networks", "cell.entry_role_catalogue_00006E_C8AF4619": "Vulnerabilities", "cell.entry_role_catalogue_000070_5F5AF6DC": "Discovery scans start & stop", "cell.entry_role_catalogue_000072_1BE362B6": "Start and stop discovery scans without viewing or managing configurations", "cell.entry_role_catalogue_000075_ECC42BE6": "Vulnerabilities", "cell.entry_role_catalogue_000077_B526D120": "Vulnerability scans reading", "cell.entry_role_catalogue_000079_51EDEB7F": "View vulnerability scans for hosts and applications (system and web scans)", "cell.entry_role_catalogue_00007C_682AF7F2": "Vulnerabilities", "cell.entry_role_catalogue_00007E_DF29F686": "Vulnerability scans editing", "cell.entry_role_catalogue_000080_B6DF41B3": "View and manage vulnerability scans for hosts and applications", "cell.entry_role_catalogue_000083_672C7CAD": "Vulnerabilities", "cell.entry_role_catalogue_000085_26D326AE": "Vulnerability scans start & stop", "cell.entry_role_catalogue_000087_1B4FFDA1": "Start and stop vulnerability scans without viewing or managing configurations", "cell.entry_role_catalogue_00008A_22F00DB2": "Vulnerabilities", "cell.entry_role_catalogue_00008C_BCEFEB56": "Reports reading", "cell.entry_role_catalogue_00008E_94452C56": "Read-only access to vulnerability reports and security findings", "cell.entry_role_catalogue_000091_D7B9BF3A": "Vulnerabilities", "cell.entry_role_catalogue_000093_108CD40A": "Reports editing", "cell.entry_role_catalogue_000095_0EF2698D": "Edit and manage summary vulnerability and vulnerability scan reports", "cell.entry_role_catalogue_000098_F2666837": "Vulnerabilities", "cell.entry_role_catalogue_00009A_0BDD0FC3": "Tickets reading", "cell.entry_role_catalogue_00009C_C857F564": "View remediation tickets and details", "cell.entry_role_catalogue_00009F_E6203561": "Vulnerabilities", "cell.entry_role_catalogue_0000A1_F474A2C7": "Full tickets editing", "cell.entry_role_catalogue_0000A3_EE006679": "Full ticket management for vulnerability remediation (requires Tickets reading role)", "cell.entry_role_catalogue_0000A6_94AD3764": "Vulnerabilities", "cell.entry_role_catalogue_0000A8_BAA453BA": "Own tickets editing", "cell.entry_role_catalogue_0000AA_476694D0": "View and manage own tickets only (requires Tickets reading role)", "cell.entry_role_catalogue_0000AD_44F398B0": "Vulnerabilities", "cell.entry_role_catalogue_0000AF_B4C55A7B": "Settings reading", "cell.entry_role_catalogue_0000B1_230A9C45": "View organization-wide vulnerability management settings", "cell.entry_role_catalogue_0000B4_07F00649": "Vulnerabilities", "cell.entry_role_catalogue_0000B6_A40913C7": "Settings editing", "cell.entry_role_catalogue_0000B8_354B4FB5": "Manage organization-wide vulnerability management settings (requires Settings reading role)", "cell.entry_role_catalogue_0000BB_71BAB181": "Vulnerabilities", "cell.entry_role_catalogue_0000BD_AF485953": "Account management", "cell.entry_role_catalogue_0000BF_0D23D15D": "Vulnerability management system administrator capabilities", "content.title_role_catalogue_0000C1_F5DA8DBC": "Collaboration Protection (ECP)", "cell.entry_role_catalogue_0000C8_D4A9EA06": "Subcategory", "cell.entry_role_catalogue_0000CA_4091BE3E": "Access level", "cell.entry_role_catalogue_0000CC_F3069E54": "Description", "cell.entry_role_catalogue_0000D0_E7D58F3E": "Collaboration Protection", "cell.entry_role_catalogue_0000D2_328AF259": "Administrator", "cell.entry_role_catalogue_0000D4_252CB022": "Full access to Collaboration Protection views including policy management", "cell.entry_role_catalogue_0000D7_FDDBB10F": "Collaboration Protection", "cell.entry_role_catalogue_0000D9_CAE4B13B": "Reading", "cell.entry_role_catalogue_0000DB_DFEC5753": "View-only access to Collaboration Protection views", "cell.entry_role_catalogue_0000DE_7BC77877": "Collaboration Protection", "cell.entry_role_catalogue_0000E0_B9D73A44": "Quarantine manager", "cell.entry_role_catalogue_0000E2_EACA7449": "Editing access to detections and quarantined files", "content.title_role_catalogue_0000E4_7C0EBB9F": "Endpoint Protection (EPP)", "cell.entry_role_catalogue_0000EB_D8507942": "Subcategory", "cell.entry_role_catalogue_0000ED_909AFE09": "Access level", "cell.entry_role_catalogue_0000EF_CEC525C7": "Description", "cell.entry_role_catalogue_0000F3_A9B999D3": "Endpoints & profiles", "cell.entry_role_catalogue_0000F5_50DE0ED6": "Reading", "cell.entry_role_catalogue_0000F7_3399337F": "View devices, security events, and Endpoint Protection profiles", "cell.entry_role_catalogue_0000FA_1A7A0513": "Endpoints & profiles", "cell.entry_role_catalogue_0000FC_BD7D31B0": "Full management", "cell.entry_role_catalogue_0000FE_053DD77A": "Complete management of devices, profiles, and profile assignment rules for all endpoint types", "cell.entry_role_catalogue_000101_E7B15157": "Endpoints & profiles", "cell.entry_role_catalogue_000103_8EAC702F": "Managing non-servers", "cell.entry_role_catalogue_000105_B7E57161": "Management of computers and mobile devices (servers read-only)", "cell.entry_role_catalogue_000108_0C20D6A1": "Endpoints & profiles", "cell.entry_role_catalogue_00010A_1BC91D77": "Managing servers", "cell.entry_role_catalogue_00010C_6454561B": "Management of server devices (computers and mobiles read-only)", "content.title_role_catalogue_00010E_71132B8C": "Extended Detection and Response (XDR)", "cell.entry_role_catalogue_000115_B0ABC3EA": "Subcategory", "cell.entry_role_catalogue_000117_8E50F30F": "Access level", "cell.entry_role_catalogue_000119_40C0DD71": "Description", "cell.entry_role_catalogue_00011D_09366E7B": "Broad Context Detections", "cell.entry_role_catalogue_00011F_9C224B15": "Reading", "cell.entry_role_catalogue_000121_4E059669": "Read access to detections and configuration for Extended Detection and Response", "cell.entry_role_catalogue_000124_EF21AC65": "Broad Context Detections", "cell.entry_role_catalogue_000126_8304B722": "Editing", "cell.entry_role_catalogue_000128_195EBB41": "Manage Broad Context Detection status, suppression rules, and reports", "cell.entry_role_catalogue_00012B_1F225A55": "Response", "cell.entry_role_catalogue_00012D_9035886A": "List responses", "cell.entry_role_catalogue_00012F_6570558A": "Review executed response actions and availability of results", "cell.entry_role_catalogue_000132_CC5DFADA": "Response", "cell.entry_role_catalogue_000134_33F75808": "Execute responses", "cell.entry_role_catalogue_000136_F5C4F7D8": "Execute response actions, download results, and configure automated actions", "cell.entry_role_catalogue_000139_2418B57F": "Event Search", "cell.entry_role_catalogue_00013B_4A0BEAD9": "Reading", "cell.entry_role_catalogue_00013D_C2E19817": "Review, execute filtered searches, and create customized views of event data", "content.title_role_catalogue_00013F_1DA9EB0D": "Environment", "cell.entry_role_catalogue_000146_5903B63B": "Subcategory", "cell.entry_role_catalogue_000148_C698CF10": "Access level", "cell.entry_role_catalogue_00014A_6E8AF733": "Description", "cell.entry_role_catalogue_00014E_F04ED65B": "Cloud configuration", "cell.entry_role_catalogue_000150_130E9866": "Reading", "cell.entry_role_catalogue_000152_CB1CF2DF": "View cloud connections without the ability to make changes", "cell.entry_role_catalogue_000155_8E49D076": "Cloud configuration", "cell.entry_role_catalogue_000157_56896CB1": "Editing", "cell.entry_role_catalogue_000159_051F03A7": "Onboard and offboard cloud products for XDR and Exposure Management", "content.title_role_catalogue_00015C_1645D6C3": "Elements administration", "cell.entry_role_catalogue_000163_F38D22BA": "Subcategory", "cell.entry_role_catalogue_000165_19AF5B17": "Access level", "cell.entry_role_catalogue_000167_4B1C94AA": "Description", "cell.entry_role_catalogue_00016B_FA3BD590": "Identity and Access Management", "cell.entry_role_catalogue_00016D_AA9E9BC7": "IAM Administrator", "cell.entry_role_catalogue_00016F_6D4EC4FD": "Manage security administrators, security groups, role assignments, API keys, and SSO federation. The holder of this role can grant all system permissions to themselves.", "content.note_role_catalogue_000171_B33B6E50": "Note: Some roles require other roles to function properly. For example, Full tickets editing requires the Tickets reading role.", "content.title_role_catalogue_000175_29712CB5": "Choosing between large-scope and granular roles", "content.p_role_catalogue_000176_8A4B81B2": "Use Elements Editing All or Elements Reading All when:", "step.step_role_catalogue_000178_1F24A022": "The security administrator needs comprehensive access.", "step.step_role_catalogue_00017A_02F1A54E": "You want automatic access to new features.", "step.step_role_catalogue_00017C_D92EDCB2": "Simplicity is preferred over granularity.", "step.step_role_catalogue_00017E_557D936B": "The role is administrative or monitoring.", "content.p_role_catalogue_000180_6210FC70": "Use granular roles when:", "step.step_role_catalogue_000182_71FB3BD8": "You need precise feature-level control.", "step.step_role_catalogue_000184_BB762805": "Different teams access different capabilities.", "step.step_role_catalogue_000186_D04F401A": "Compliance requires separation of duties.", "step.step_role_catalogue_000188_6A95A5F1": "You want explicit control over feature access.", "desc": [ "content.title_role_catalogue_000012_336A1128", "content.p_role_catalogue_000013_71EDCA5D", "content.title_role_catalogue_000015_0AB52130", { "table.table_large-scope-roles-2": [ { "thead.thead_role_catalogue_00001A_D976AB12": [ "cell.entry_role_catalogue_00001C_5FFAF24A", "cell.entry_role_catalogue_00001E_CD787D9C", "cell.entry_role_catalogue_000020_F3732F85" ] }, { "row.row_role_catalogue_000023_C3FADC27": [ "cell.entry_role_catalogue_000024_0C64782F", "cell.entry_role_catalogue_000026_CAB222F4", "cell.entry_role_catalogue_000028_1E37F271" ] }, { "row.row_role_catalogue_00002A_49692812": [ "cell.entry_role_catalogue_00002B_68353B4A", "cell.entry_role_catalogue_00002D_3B6594BA", "cell.entry_role_catalogue_00002F_565178D2" ] } ] }, "content.note_role_catalogue_000031_6F365067", "content.title_role_catalogue_000033_43E0E75F", "content.p_role_catalogue_000034_4CC50508", "content.title_role_catalogue_000035_E9C253A7", { "table.table_exposure-management-xm": [ { "thead.thead_role_catalogue_00003A_7A9CE312": [ "cell.entry_role_catalogue_00003C_3B2D2A27", "cell.entry_role_catalogue_00003E_79C411C4", "cell.entry_role_catalogue_000040_EBADF50C" ] }, { "row.row_role_catalogue_000043_36E2FABE": [ "cell.entry_role_catalogue_000044_2093C8B9", "cell.entry_role_catalogue_000046_2662194C", "cell.entry_role_catalogue_000048_14862C06" ] }, { "row.row_role_catalogue_00004A_3A6232DE": [ "cell.entry_role_catalogue_00004B_06829197", "cell.entry_role_catalogue_00004D_444C4DAB", "cell.entry_role_catalogue_00004F_7C09956B" ] }, { "row.row_role_catalogue_000051_83FE0E29": [ "cell.entry_role_catalogue_000052_4E30EDF7", "cell.entry_role_catalogue_000054_794ED1C6", "cell.entry_role_catalogue_000056_3BDE16CD" ] }, { "row.row_role_catalogue_000058_C6144F7F": [ "cell.entry_role_catalogue_000059_73B1A8E9", "cell.entry_role_catalogue_00005B_1DE70FA7", "cell.entry_role_catalogue_00005D_8F508414" ] }, { "row.row_role_catalogue_00005F_6E69BE63": [ "cell.entry_role_catalogue_000060_AFDB8B13", "cell.entry_role_catalogue_000062_831879EB", "cell.entry_role_catalogue_000064_65847444" ] }, { "row.row_role_catalogue_000066_DB6D3F57": [ "cell.entry_role_catalogue_000067_85B14E0D", "cell.entry_role_catalogue_000069_CC410208", "cell.entry_role_catalogue_00006B_A0550A0C" ] }, { "row.row_role_catalogue_00006D_11C78A98": [ "cell.entry_role_catalogue_00006E_C8AF4619", "cell.entry_role_catalogue_000070_5F5AF6DC", "cell.entry_role_catalogue_000072_1BE362B6" ] }, { "row.row_role_catalogue_000074_193DC259": [ "cell.entry_role_catalogue_000075_ECC42BE6", "cell.entry_role_catalogue_000077_B526D120", "cell.entry_role_catalogue_000079_51EDEB7F" ] }, { "row.row_role_catalogue_00007B_B5ACADEB": [ "cell.entry_role_catalogue_00007C_682AF7F2", "cell.entry_role_catalogue_00007E_DF29F686", "cell.entry_role_catalogue_000080_B6DF41B3" ] }, { "row.row_role_catalogue_000082_7ACFC38E": [ "cell.entry_role_catalogue_000083_672C7CAD", "cell.entry_role_catalogue_000085_26D326AE", "cell.entry_role_catalogue_000087_1B4FFDA1" ] }, { "row.row_role_catalogue_000089_7D2FDC25": [ "cell.entry_role_catalogue_00008A_22F00DB2", "cell.entry_role_catalogue_00008C_BCEFEB56", "cell.entry_role_catalogue_00008E_94452C56" ] }, { "row.row_role_catalogue_000090_BB13FC44": [ "cell.entry_role_catalogue_000091_D7B9BF3A", "cell.entry_role_catalogue_000093_108CD40A", "cell.entry_role_catalogue_000095_0EF2698D" ] }, { "row.row_role_catalogue_000097_BE3366F2": [ "cell.entry_role_catalogue_000098_F2666837", "cell.entry_role_catalogue_00009A_0BDD0FC3", "cell.entry_role_catalogue_00009C_C857F564" ] }, { "row.row_role_catalogue_00009E_05ECBEA2": [ "cell.entry_role_catalogue_00009F_E6203561", "cell.entry_role_catalogue_0000A1_F474A2C7", "cell.entry_role_catalogue_0000A3_EE006679" ] }, { "row.row_role_catalogue_0000A5_1A4A5EB1": [ "cell.entry_role_catalogue_0000A6_94AD3764", "cell.entry_role_catalogue_0000A8_BAA453BA", "cell.entry_role_catalogue_0000AA_476694D0" ] }, { "row.row_role_catalogue_0000AC_27C1B9DC": [ "cell.entry_role_catalogue_0000AD_44F398B0", "cell.entry_role_catalogue_0000AF_B4C55A7B", "cell.entry_role_catalogue_0000B1_230A9C45" ] }, { "row.row_role_catalogue_0000B3_26A96D48": [ "cell.entry_role_catalogue_0000B4_07F00649", "cell.entry_role_catalogue_0000B6_A40913C7", "cell.entry_role_catalogue_0000B8_354B4FB5" ] }, { "row.row_role_catalogue_0000BA_B7B2CA21": [ "cell.entry_role_catalogue_0000BB_71BAB181", "cell.entry_role_catalogue_0000BD_AF485953", "cell.entry_role_catalogue_0000BF_0D23D15D" ] } ] }, "content.title_role_catalogue_0000C1_F5DA8DBC", { "table.table_collaboration-protection-ecp": [ { "thead.thead_role_catalogue_0000C6_F58C6139": [ "cell.entry_role_catalogue_0000C8_D4A9EA06", "cell.entry_role_catalogue_0000CA_4091BE3E", "cell.entry_role_catalogue_0000CC_F3069E54" ] }, { "row.row_role_catalogue_0000CF_B5542A92": [ "cell.entry_role_catalogue_0000D0_E7D58F3E", "cell.entry_role_catalogue_0000D2_328AF259", "cell.entry_role_catalogue_0000D4_252CB022" ] }, { "row.row_role_catalogue_0000D6_57426D08": [ "cell.entry_role_catalogue_0000D7_FDDBB10F", "cell.entry_role_catalogue_0000D9_CAE4B13B", "cell.entry_role_catalogue_0000DB_DFEC5753" ] }, { "row.row_role_catalogue_0000DD_4B095073": [ "cell.entry_role_catalogue_0000DE_7BC77877", "cell.entry_role_catalogue_0000E0_B9D73A44", "cell.entry_role_catalogue_0000E2_EACA7449" ] } ] }, "content.title_role_catalogue_0000E4_7C0EBB9F", { "table.table_endpoint-protection-epp": [ { "thead.thead_role_catalogue_0000E9_36BF1733": [ "cell.entry_role_catalogue_0000EB_D8507942", "cell.entry_role_catalogue_0000ED_909AFE09", "cell.entry_role_catalogue_0000EF_CEC525C7" ] }, { "row.row_role_catalogue_0000F2_4E740DB8": [ "cell.entry_role_catalogue_0000F3_A9B999D3", "cell.entry_role_catalogue_0000F5_50DE0ED6", "cell.entry_role_catalogue_0000F7_3399337F" ] }, { "row.row_role_catalogue_0000F9_367C6100": [ "cell.entry_role_catalogue_0000FA_1A7A0513", "cell.entry_role_catalogue_0000FC_BD7D31B0", "cell.entry_role_catalogue_0000FE_053DD77A" ] }, { "row.row_role_catalogue_000100_3E81BD8C": [ "cell.entry_role_catalogue_000101_E7B15157", "cell.entry_role_catalogue_000103_8EAC702F", "cell.entry_role_catalogue_000105_B7E57161" ] }, { "row.row_role_catalogue_000107_1B637A85": [ "cell.entry_role_catalogue_000108_0C20D6A1", "cell.entry_role_catalogue_00010A_1BC91D77", "cell.entry_role_catalogue_00010C_6454561B" ] } ] }, "content.title_role_catalogue_00010E_71132B8C", { "table.table_extended-detection-and-resD3D8": [ { "thead.thead_role_catalogue_000113_CAE94FB8": [ "cell.entry_role_catalogue_000115_B0ABC3EA", "cell.entry_role_catalogue_000117_8E50F30F", "cell.entry_role_catalogue_000119_40C0DD71" ] }, { "row.row_role_catalogue_00011C_128B0EAD": [ "cell.entry_role_catalogue_00011D_09366E7B", "cell.entry_role_catalogue_00011F_9C224B15", "cell.entry_role_catalogue_000121_4E059669" ] }, { "row.row_role_catalogue_000123_FDC13C60": [ "cell.entry_role_catalogue_000124_EF21AC65", "cell.entry_role_catalogue_000126_8304B722", "cell.entry_role_catalogue_000128_195EBB41" ] }, { "row.row_role_catalogue_00012A_1E468193": [ "cell.entry_role_catalogue_00012B_1F225A55", "cell.entry_role_catalogue_00012D_9035886A", "cell.entry_role_catalogue_00012F_6570558A" ] }, { "row.row_role_catalogue_000131_B998B087": [ "cell.entry_role_catalogue_000132_CC5DFADA", "cell.entry_role_catalogue_000134_33F75808", "cell.entry_role_catalogue_000136_F5C4F7D8" ] }, { "row.row_role_catalogue_000138_2FCC2CED": [ "cell.entry_role_catalogue_000139_2418B57F", "cell.entry_role_catalogue_00013B_4A0BEAD9", "cell.entry_role_catalogue_00013D_C2E19817" ] } ] }, "content.title_role_catalogue_00013F_1DA9EB0D", { "table.table_environment": [ { "thead.thead_role_catalogue_000144_A17F7A78": [ "cell.entry_role_catalogue_000146_5903B63B", "cell.entry_role_catalogue_000148_C698CF10", "cell.entry_role_catalogue_00014A_6E8AF733" ] }, { "row.row_role_catalogue_00014D_4A7095DB": [ "cell.entry_role_catalogue_00014E_F04ED65B", "cell.entry_role_catalogue_000150_130E9866", "cell.entry_role_catalogue_000152_CB1CF2DF" ] }, { "row.row_role_catalogue_000154_EA45C103": [ "cell.entry_role_catalogue_000155_8E49D076", "cell.entry_role_catalogue_000157_56896CB1", "cell.entry_role_catalogue_000159_051F03A7" ] } ] }, "content.title_role_catalogue_00015C_1645D6C3", { "table.table_elements-administration": [ { "thead.thead_role_catalogue_000161_B7E48389": [ "cell.entry_role_catalogue_000163_F38D22BA", "cell.entry_role_catalogue_000165_19AF5B17", "cell.entry_role_catalogue_000167_4B1C94AA" ] }, { "row.row_role_catalogue_00016A_9575E0F3": [ "cell.entry_role_catalogue_00016B_FA3BD590", "cell.entry_role_catalogue_00016D_AA9E9BC7", "cell.entry_role_catalogue_00016F_6D4EC4FD" ] } ] }, "content.note_role_catalogue_000171_B33B6E50", "content.title_role_catalogue_000175_29712CB5", "content.p_role_catalogue_000176_8A4B81B2", { "steps.ul_role_catalogue_000177_BE62FE68": [ "step.step_role_catalogue_000178_1F24A022", "step.step_role_catalogue_00017A_02F1A54E", "step.step_role_catalogue_00017C_D92EDCB2", "step.step_role_catalogue_00017E_557D936B" ] }, "content.p_role_catalogue_000180_6210FC70", { "steps.ul_role_catalogue_000181_FD24F0DE": [ "step.step_role_catalogue_000182_71FB3BD8", "step.step_role_catalogue_000184_BB762805", "step.step_role_catalogue_000186_D04F401A", "step.step_role_catalogue_000188_6A95A5F1" ] } ] }, "limitations-latest-en.json": { "title": "title_limitations_000001_69C25697", "title_limitations_000001_69C25697": "System limits", "shortdesc": "shortdesc_limitations_000002_9FDC200C", "shortdesc_limitations_000002_9FDC200C": "Elements RBAC enforces operational limits on organizations, security groups, security administrators, and role assignments to maintain system performance and stability.", "content.title_limitations_000011_3B069F40": "System limits", "cell.entry_limitations_000018_4A48B486": "Resource", "cell.entry_limitations_000019_4CC51863": "Maximum Limit", "cell.entry_limitations_00001A_B9689CA9": "Description", "cell.entry_limitations_00001D_613A33AF": "Organization memberships per user", "cell.entry_limitations_00001E_4871A6FC": "50", "cell.entry_limitations_00001F_093DDEFE": "Maximum number of organizations a single user account can belong to", "cell.entry_limitations_000021_0792568C": "Users per security group", "cell.entry_limitations_000022_6450EB7E": "500", "cell.entry_limitations_000023_5BCF49D3": "Maximum members in a single security group", "cell.entry_limitations_000025_BC0D1E7B": "Security group memberships per user", "cell.entry_limitations_000026_B5495659": "50", "cell.entry_limitations_000027_CF049E9D": "Maximum number of security groups a user can belong to", "cell.entry_limitations_000029_E3E61B93": "Security groups per organization", "cell.entry_limitations_00002A_FE70F437": "100", "cell.entry_limitations_00002B_7CEF4C82": "Maximum number of security groups that can be created in one organization", "cell.entry_limitations_00002D_D8B9F82D": "Role assignments per user or group", "cell.entry_limitations_00002E_410EB0BE": "100", "cell.entry_limitations_00002F_38C2F12F": "Maximum number of role assignments for a single directory member", "cell.entry_limitations_000031_9641C2A7": "User accounts per organization", "cell.entry_limitations_000032_FDDC9709": "1,000", "cell.entry_limitations_000033_391458A3": "Maximum number of security administrators in a single organization", "content.title_limitations_000034_AF365908": "Important notes", "step.step_limitations_000036_D4706322": "These limits apply to both locally-managed and Entra-provisioned entities", "step.step_limitations_000037_A462BD3F": "When using Entra ID provisioning, ensure that your provisioning filters do not exceed these limits", "step.step_limitations_000038_D4DAAA55": "For partners managing many companies: Users should belong only to the Solution Provider organization (one membership), not to individual company organizations", "step.step_limitations_000039_C3B1A2D0": "Large organizations approaching these limits should contact WithSecure support to discuss architectural options", "desc": [ "content.title_limitations_000011_3B069F40", { "table.table_system-limits": [ { "thead.thead_limitations_000016_29B2C509": [ "cell.entry_limitations_000018_4A48B486", "cell.entry_limitations_000019_4CC51863", "cell.entry_limitations_00001A_B9689CA9" ] }, { "row.row_limitations_00001C_AB2D83E6": [ "cell.entry_limitations_00001D_613A33AF", "cell.entry_limitations_00001E_4871A6FC", "cell.entry_limitations_00001F_093DDEFE" ] }, { "row.row_limitations_000020_AE069B0B": [ "cell.entry_limitations_000021_0792568C", "cell.entry_limitations_000022_6450EB7E", "cell.entry_limitations_000023_5BCF49D3" ] }, { "row.row_limitations_000024_94DF954F": [ "cell.entry_limitations_000025_BC0D1E7B", "cell.entry_limitations_000026_B5495659", "cell.entry_limitations_000027_CF049E9D" ] }, { "row.row_limitations_000028_C623D2C1": [ "cell.entry_limitations_000029_E3E61B93", "cell.entry_limitations_00002A_FE70F437", "cell.entry_limitations_00002B_7CEF4C82" ] }, { "row.row_limitations_00002C_DC7CF175": [ "cell.entry_limitations_00002D_D8B9F82D", "cell.entry_limitations_00002E_410EB0BE", "cell.entry_limitations_00002F_38C2F12F" ] }, { "row.row_limitations_000030_D059F03F": [ "cell.entry_limitations_000031_9641C2A7", "cell.entry_limitations_000032_FDDC9709", "cell.entry_limitations_000033_391458A3" ] } ] }, "content.title_limitations_000034_AF365908", { "steps.ul_limitations_000035_00AD825C": [ "step.step_limitations_000036_D4706322", "step.step_limitations_000037_A462BD3F", "step.step_limitations_000038_D4DAAA55", "step.step_limitations_000039_C3B1A2D0" ] } ] }, "toc-latest-en.json": { "toc": [ "withsecure_elements_help-latest-en", { "logging_in-latest-en": [ "logging_in_to_non_federated_domains-latest-en", "logging_in_to_a_federated_domain-latest-en", { "mfa-latest-en": [ "concept_k4l_nv5_m1c-latest-en", "setting_up_2fa-latest-en", "task_qc3_vmh_k1c-latest-en", "using_device_biometrics-latest-en" ] } ] }, { "federated_single_sign_on-latest-en": [ { "federated_sso_prereqs-latest-en": [ "sso_considerations-latest-en" ] }, "setting_up_federated_single_sign_on-latest-en", "linking_user_identities-latest-en", "removing_federated_domain-latest-en" ] }, { "user_management-latest-en": [ { "access_rights-latest-en": [ "access_rights_by_role-latest-en" ] }, "using_scope_selector-2-latest-en", { "identity_and_access_management_roles-latest-en": [ "elements_iam_role_properties-latest-en" ] }, "add_admin_account_company-latest-en", "add_sep_account-latest-en", "edit_admin_account-latest-en", "managing_api_clients-latest-en", "deleting_api_client-latest-en", "recover_password-latest-en", "task_changing_account_details-latest-en" ] }, { "about_product_subscriptions-latest-en": [ "managing_company-latest-en", "adding_subscription_key-latest-en", "adding_company-latest-en", "viewing_subscriptions-latest-en", "changing_subscription_key-latest-en", { "upgrade-latest-en": [ "upgrading_options-latest-en" ] } ] }, "concept_about_security_services-latest-en", { "add_managing_devices_company-latest-en": [ { "adding_devices-latest-en": [ "download_software-latest-en", "manage_automatic_deletion-latest-en" ] }, "managing_invites-latest-en", { "enhancing_device_management_with_custom_labels-latest-en": [ "adding_device_labels-latest-en" ] }, { "manage_devices_in_portal-latest-en": [ { "managing_asset_groups-latest-en": [ "creating_asset_groups-latest-en", "adding_devices_asset_groups-latest-en" ] }, "managing_devices-latest-en", "automatically_deleting_computers-latest-en", "viewing_devices_ad-latest-en", "customizing_devices_view-latest-en", "request_diagnostics-latest-en" ] }, "elements_data_recovery-latest-en" ] }, { "interacting_with_withsecure_services-latest-en": [ { "concept_samplevalidation-latest-en": [ { "service_offering-latest-en": [ "false_detections-latest-en", "missed_detections-latest-en" ] }, "scope_clarification-latest-en", { "prerequisites_and_service_availability-latest-en": [ "service_availability-latest-en", "service_delivery_process-latest-en", { "creating_and_viewing_sample_validation_requests_in_the_request_views-latest-en": [ "creating_and_viewing_sample_validation_request_in_the_request_views-latest-en", "submitting_a_file_sample-latest-en", "submitting_a_url_sample-latest-en", "submitting_email_sample-latest-en", "managing_and_viewing_open_requests-latest-en", "managing_open_requests-latest-en", "verdicts_resolution-latest-en", "support_and_escalations-latest-en", "other_submissions-latest-en" ] } ] }, { "best_practices_for_gathering_samples_and_reporting_ransomware-latest-en": [ { "how_to_gather_a_file_samples-latest-en": [ "gathering_a_file_sample_for_windows-latest-en", "gathering_a_file_sample_for_macos-latest-en", "gathering_a_file_sample_for_linux-latest-en", "collecting_quarantined_files_dumper_tool-latest-en" ] }, { "how_to_gather_a_url_samples-latest-en": [ "how_to_gather_a_url_sample_windows_macos_linux-latest-en", "gathering_a_url_sample_for_macos-latest-en", "gathering_a_url_sample_for_linux-latest-en" ] }, { "how_to_gather_an_email_sample-latest-en": [ "gathering_an_email_sample_windows-latest-en", "gathering_an_email_sample_macos-latest-en", "gathering_an_email_sample_linux-latest-en" ] }, "malicious_application_android-latest-en", { "reporting_ransomware_or_active_threats_no_detection_observed-latest-en": [ "ransomware_or_active_threats_windows-latest-en", "ransomware_or_active_threats_macos_linux-latest-en", "information_to_include_for_ransomware-latest-en" ] } ] } ] } ] }, { "about_ai_security-latest-en": [ { "about_ai_asset_visibility-latest-en": [ "viewing_ai_assets-latest-en", "setting_ai_asset_status-latest-en" ] }, { "about_ai_identities-latest-en": [ "viewing_ai_identities-latest-en", "updating_ai_identities-latest-en" ] }, { "about_ai_security_dashboard-latest-en": [ "viewing_ai_security_dashboard-latest-en" ] } ] }, { "elevate_requests-latest-en": [ "creating_a_request-latest-en", "viewing_and_managing_request_details-latest-en" ] }, { "third_party_integration-latest-en": [ { "autotask_psa_integration-latest-en": [ "getting_integration_credentials_from_autotask-latest-en", "configuring_autotask_integration-latest-en" ] }, { "connectwise_psa_integration-latest-en": [ "configuring_connectwise_psa_integration_in_elements_security_center-latest-en" ] }, { "halopsa_integration-latest-en": [ "configuring_halopsa_integration-latest-en" ] } ] }, { "what_is_elements_rbac-latest-en": [ { "core_concepts-latest-en": [ "the_partner_compay_business_model-latest-en", "the_subject_role_ressource_model-latest-en", { "organization_overview-latest-en": [ "organization_and_hierarchy-latest-en", "organization_types_solution_provider_service_partner_and_company-latest-en" ] }, { "security_administrator_user-latest-en": [ "user_types-latest-en" ] }, { "security_groups-latest-en": [ "locally_created_and_provisioned_security_groups-latest-en" ] }, { "role_overview-latest-en": [ "special_elements_roles-latest-en" ] }, { "role_assignments-latest-en": [ "direct_indirect_and_inherited_role_assignments-latest-en", "effective_permissions-latest-en", "access_without_membership-latest-en" ] } ] }, { "planning_your_deployment-latest-en": [ "planning_your_deployment_as_a_partner-latest-en", "planning_your_deployment_as_a_company-latest-en", { "best_practices-latest-en": [ "best_practices_for_organizations-latest-en", "best_practices_for_security_groups-latest-en", "best_practices_for_role_assignments-latest-en" ] }, { "getting_started-latest-en": [ "enabling_rbac-latest-en", "quick_start_for_partners-latest-en", "quick_start_for_companies-latest-en" ] }, { "organizing_your_environment-latest-en": [ "visibility_and_isolation_between_organizations-latest-en", "organization_moves_and_access_control-latest-en", "creating_service_partners-latest-en", "moving_companies_under_service_provider-latest-en", { "concept_restrict_partner_access-latest-en": [ "restricting_partner_access_to_a_company-latest-en" ] }, "organization_limitations-latest-en" ] } ] }, { "managing_security_administrators-latest-en": [ { "account_types_and_ownership-latest-en": [ "account_ownership_federated_and_local_accounts-latest-en", "root_user-latest-en", "organization_membership_and_access-latest-en", "cross_tenant_access_policies-latest-en" ] }, { "inviting_and_managing_manually-latest-en": [ "managing_security_administrators_manually-latest-en", "inviting_users_no_entra_id_provisioning-latest-en", "inviting_to_partner_organizations-latest-en", "inviting_a_security_administrator_to_a_company_organization-latest-en", "creating_the_first_company_administrator-latest-en", "adding_a_security_administrator_to_security_group_manually-latest-en", "removing_a_security_administrator_from_a_security_group_manually-latest-en", "removing_a_security_administrator_from_an_organization-latest-en", "removing_a_federated_security_administrator_from_all_organizations-latest-en" ] }, { "managing_through_entra_id-latest-en": [ "managing_security_administrators_with_entra_id-latest-en", "adding_a_security_administrator_through_entra_id-latest-en", "deactivating_a_security_administrator_through_entra_id-latest-en", "deleting_a_security_administrator_through_entra_id-latest-en", "removing_a_security_administrator_from_a_security_group_thouygh_entra_id-latest-en", "user_limitations-latest-en" ] }, { "managing_security_groups-latest-en": [ "creating_security_groups-latest-en", "deleting_security_group-latest-en" ] }, { "managing_role_assignments-latest-en": [ { "granting_access-latest-en": [ "assigning_roles_to_security_groups_member_first_approach-latest-en", "assigning_roles_to_users_direct_assignment-latest-en", "organization_first_approach-latest-en" ] }, { "inspecting_access-latest-en": [ "viewing_role_assignments_for_a_security_group-latest-en", "viewing_role_assignments_for_an_organization-latest-en", "checking_effective_roles_for_a_user-latest-en" ] }, "using_inheritance_effectively-latest-en", { "revoking_access-latest-en": [ "removing_a_direct_role_assignment-latest-en", "removing_a_role_assignment_from_a_security_group-latest-en", "removing_role_assignments_from_organization_view-latest-en" ] }, "constraints_gotchas-latest-en", "faq_troubleshooting_role_assignments-latest-en" ] } ] }, { "microsoft_entra_id_integration-2-latest-en": [ "microsoft_entra_id_integration-latest-en", { "sso_federation-latest-en": [ "sso_federation_setup-latest-en" ] }, { "scim_provisioning-latest-en": [ "scim_provisioning_configuration-latest-en", "filtering_which_users_and_groups_synchronize-latest-en", "activating_provisioning-latest-en", "verifying_that_provisioning_works-latest-en" ] }, "troubleshooting_entra_id_integration-latest-en", "limitations_of_entra_id_integration-latest-en", "best_practices_for_entra_id_integration-latest-en", "troubleshooting_integration-latest-en" ] }, { "migrating_to_elements_rbac-latest-en": [ { "understanding_the_migration-latest-en": [ "what_changes_when_you_migrate-latest-en", "migration_approaches_phased_or_big_bang-latest-en", "reversibility_of_the_migration-latest-en" ] }, { "preparing_for_migration-latest-en": [ "assessing_your_current_state-latest-en", "pre_migration_decisions-latest-en", "migration_checklist-latest-en", "the_migration_sequence-latest-en" ] }, { "performing_the_migration-latest-en": [ "reviewing_existing_access_after_turning_on_rbac-latest-en", "migrating_from_direct_role_assignments_to_security_groups-latest-en", "cleaning_up_redundant_direct_role_assignments-latest-en", "removing_partner_security_administrators_from_company_memberships-latest-en" ] }, { "verifying_the_migration-latest-en": [ "verifying_access_after_migration-latest-en" ] }, "common_migration_issues-latest-en" ] }, { "reference_intro-latest-en": [ "roles_and_permissions-latest-en", "limitations-latest-en" ] } ] } ], "withsecure_elements_help-latest-en": "Introduction to the WithSecure Elements solution", "logging_in_to_non_federated_domains-latest-en": "Log in to non-federated domains", "logging_in_to_a_federated_domain-latest-en": "Log in to federated domains", "concept_k4l_nv5_m1c-latest-en": "MFA methods", "setting_up_2fa-latest-en": "Choose multi-factor authentication", "task_qc3_vmh_k1c-latest-en": "Remove a multi-factor authentication", "using_device_biometrics-latest-en": "Use device biometrics", "mfa-latest-en": "Multi-factor authentication", "logging_in-latest-en": "Logging in", "sso_considerations-latest-en": "Before implementing single sign-on (SSO)", "federated_sso_prereqs-latest-en": "Prerequisites", "setting_up_federated_single_sign_on-latest-en": "Set up federated single sign-on with Microsoft Entra ID", "linking_user_identities-latest-en": "Link user identities", "removing_federated_domain-latest-en": "Remove federation from a domain", "federated_single_sign_on-latest-en": "Federated single sign-on", "access_rights_by_role-latest-en": "Access rights by role", "access_rights-latest-en": "About access rights", "using_scope_selector-2-latest-en": "Move between the managed companies", "elements_iam_role_properties-latest-en": "Elements IAM role properties", "identity_and_access_management_roles-latest-en": "Elements Identity and Access Management (IAM) role", "add_admin_account_company-latest-en": "Add a new administrator", "add_sep_account-latest-en": "Add a new service partner", "edit_admin_account-latest-en": "Edit or remove administrators", "managing_api_clients-latest-en": "Create an API client", "deleting_api_client-latest-en": "Delete an API client", "recover_password-latest-en": "Recover your password", "task_changing_account_details-latest-en": "Change your account details", "user_management-latest-en": "User management", "managing_company-latest-en": "Adding a customer company", "adding_subscription_key-latest-en": "Assign a subscription key for a customer company", "adding_company-latest-en": "Order products for a new customer company", "viewing_subscriptions-latest-en": "View available product subscriptions", "changing_subscription_key-latest-en": "Change the subscription key", "upgrading_options-latest-en": "Upgrading your subscriptions", "upgrade-latest-en": "Upgrading your subscriptions", "about_product_subscriptions-latest-en": "Taking Elements products into use", "concept_about_security_services-latest-en": "Security services overview", "download_software-latest-en": "Download software from Elements Security Center", "manage_automatic_deletion-latest-en": "Manage automatic deletion of devices", "adding_devices-latest-en": "Distributing WithSecure software", "managing_invites-latest-en": "Manage invitations", "adding_device_labels-latest-en": "Add device labels", "enhancing_device_management_with_custom_labels-latest-en": "Enhancing device management with custom labels", "creating_asset_groups-latest-en": "Create asset groups", "adding_devices_asset_groups-latest-en": "Add devices to asset groups", "managing_asset_groups-latest-en": "Managing asset groups", "managing_devices-latest-en": "Remotely manage a device", "automatically_deleting_computers-latest-en": "Automatically delete devices", "viewing_devices_ad-latest-en": "View devices based on the Active Directory structure", "customizing_devices_view-latest-en": "Customize the Devices view", "request_diagnostics-latest-en": "Request diagnostic data", "manage_devices_in_portal-latest-en": "Managing devices in Elements Security Center", "elements_data_recovery-latest-en": "Elements data recovery", "add_managing_devices_company-latest-en": "Adding devices for management", "false_detections-latest-en": "False Detections (Incorrectly Detected)", "missed_detections-latest-en": "Missed Detections (Not Detected)", "service_offering-latest-en": "Service Offering", "scope_clarification-latest-en": "Scope clarification", "service_availability-latest-en": "Service Availability", "service_delivery_process-latest-en": "Service Delivery", "creating_and_viewing_sample_validation_request_in_the_request_views-latest-en": "Choosing the correct Sample Type", "submitting_a_file_sample-latest-en": "Submit a file sample", "submitting_a_url_sample-latest-en": "Submit a URL sample", "submitting_email_sample-latest-en": "Submit an email sample", "managing_and_viewing_open_requests-latest-en": "Managing and viewing Open Requests", "managing_open_requests-latest-en": "Add and View Comments", "verdicts_resolution-latest-en": "Resolution", "support_and_escalations-latest-en": "Support and escalations", "other_submissions-latest-en": "Other submissions", "creating_and_viewing_sample_validation_requests_in_the_request_views-latest-en": "Creating and viewing sample validation requests in the request views", "prerequisites_and_service_availability-latest-en": "Getting started with WithSecure Sample Validation: What you need and Why it helps", "gathering_a_file_sample_for_windows-latest-en": "Gather a File Sample for Windows", "gathering_a_file_sample_for_macos-latest-en": "Gather a File Sample for macOS", "gathering_a_file_sample_for_linux-latest-en": "Gather a File Sample for Linux", "collecting_quarantined_files_dumper_tool-latest-en": "Collect quarantined files using Quarantine Dumper Tool", "how_to_gather_a_file_samples-latest-en": "Gathering file samples", "how_to_gather_a_url_sample_windows_macos_linux-latest-en": "Gather a URL sample for Windows ", "gathering_a_url_sample_for_macos-latest-en": "Gather a URL sample for macOS ", "gathering_a_url_sample_for_linux-latest-en": "Gather a URL sample for Linux ", "how_to_gather_a_url_samples-latest-en": "Gathering URL samples", "gathering_an_email_sample_windows-latest-en": "Gather an Email Sample for Windows", "gathering_an_email_sample_macos-latest-en": "Gather an Email Sample for macOS", "gathering_an_email_sample_linux-latest-en": "Gather an Email Sample for Linux", "how_to_gather_an_email_sample-latest-en": "Gathering email samples", "malicious_application_android-latest-en": "Report application recognized as malicious (Android)", "ransomware_or_active_threats_windows-latest-en": "Report Ransomware or Active Threats (No Detection Observed) Windows", "ransomware_or_active_threats_macos_linux-latest-en": "Report Ransomware or Active Threats (No Detection Observed) macOS/Linux", "information_to_include_for_ransomware-latest-en": "Provide information for ransomware reporting", "reporting_ransomware_or_active_threats_no_detection_observed-latest-en": "Reporting ransomware or active threats (no detection observed)", "best_practices_for_gathering_samples_and_reporting_ransomware-latest-en": "Best practices for gathering samples and reporting ransomware", "concept_samplevalidation-latest-en": "WithSecure Sample Validation", "interacting_with_withsecure_services-latest-en": "Interacting with WithSecure Services", "viewing_ai_assets-latest-en": "View the AI assets installed on devices", "setting_ai_asset_status-latest-en": "Approve or disallow an AI asset", "about_ai_asset_visibility-latest-en": "Reviewing AI assets on devices", "viewing_ai_identities-latest-en": "View AI identities", "updating_ai_identities-latest-en": "Set risk and response options for AI identities", "about_ai_identities-latest-en": "Managing AI identities", "viewing_ai_security_dashboard-latest-en": "View the AI Security dashboard", "about_ai_security_dashboard-latest-en": "Monitoring AI use with the AI Security dashboard", "about_ai_security-latest-en": "AI Security", "creating_a_request-latest-en": "Create a request", "viewing_and_managing_request_details-latest-en": "View and manage request details", "elevate_requests-latest-en": "Elevate Requests", "getting_integration_credentials_from_autotask-latest-en": "Get integration credentials from Autotask", "configuring_autotask_integration-latest-en": "Configure Autotask PSA integration in Elements Security Center", "autotask_psa_integration-latest-en": "Integrating WithSecure Elements with Autotask PSA", "configuring_connectwise_psa_integration_in_elements_security_center-latest-en": "Configure ConnectWise PSA integration in Elements Security Center", "connectwise_psa_integration-latest-en": "Integrating WithSecure Elements with ConnectWise PSA", "configuring_halopsa_integration-latest-en": "Configure HaloPSA integration in Elements Security Center", "halopsa_integration-latest-en": "Integrating WithSecure Elements with HaloPSA", "third_party_integration-latest-en": "Third-party integrations", "the_partner_compay_business_model-latest-en": "The partner-company business model", "the_subject_role_ressource_model-latest-en": "The subject-role-resource model", "organization_and_hierarchy-latest-en": "Organizational hierarchy and inheritance", "organization_types_solution_provider_service_partner_and_company-latest-en": "Organization types: solution provider, service partner, and company", "organization_overview-latest-en": "What is an organization", "user_types-latest-en": "Partner and company users", "security_administrator_user-latest-en": "What is a security administrator", "locally_created_and_provisioned_security_groups-latest-en": "Locally created and provisioned security groups", "security_groups-latest-en": "What is a security group", "special_elements_roles-latest-en": "Large-scope roles: Elements Editing All and Elements Reading All", "role_overview-latest-en": "What is a role", "direct_indirect_and_inherited_role_assignments-latest-en": "Direct, indirect, and inherited role assignments", "effective_permissions-latest-en": "Effective permissions", "access_without_membership-latest-en": "Access without membership", "role_assignments-latest-en": "What is a role assignment", "core_concepts-latest-en": "Core concepts", "planning_your_deployment_as_a_partner-latest-en": "Planning your deployment as a partner", "planning_your_deployment_as_a_company-latest-en": "Planning your deployment as a company", "best_practices_for_organizations-latest-en": "Best practices for organizations", "best_practices_for_security_groups-latest-en": "Best practices for security groups", "best_practices_for_role_assignments-latest-en": "Best practices for role assignments", "best_practices-latest-en": "Best practices for Elements RBAC", "enabling_rbac-latest-en": "Turn on RBAC for an organization", "quick_start_for_partners-latest-en": "Set up Elements RBAC for partners", "quick_start_for_companies-latest-en": "Set up Elements RBAC for companies", "getting_started-latest-en": "Getting started", "visibility_and_isolation_between_organizations-latest-en": "Visibility and isolation between organizations", "organization_moves_and_access_control-latest-en": "What happens when an organization moves in the hierarchy", "creating_service_partners-latest-en": "Create a service partner", "moving_companies_under_service_provider-latest-en": "Move a company to another service partner", "restricting_partner_access_to_a_company-latest-en": "Restrict partner access to a company", "concept_restrict_partner_access-latest-en": "What restricting partner access means", "organization_limitations-latest-en": "Organization limitations", "organizing_your_environment-latest-en": "Organizing your environment", "planning_your_deployment-latest-en": "Planning your deployment", "account_ownership_federated_and_local_accounts-latest-en": "Account Ownership: federated and local accounts", "root_user-latest-en": "Root User", "organization_membership_and_access-latest-en": "Organization membership and access", "cross_tenant_access_policies-latest-en": "Cross-tenant access policies", "account_types_and_ownership-latest-en": "Account types and ownership", "managing_security_administrators_manually-latest-en": "Managing Security Administrators manually", "inviting_users_no_entra_id_provisioning-latest-en": "Inviting Users (no Entra ID Provisioning)", "inviting_to_partner_organizations-latest-en": "Invite Security Administrator to Partner Organizations", "inviting_a_security_administrator_to_a_company_organization-latest-en": "Invite Security Administrator to company organization", "creating_the_first_company_administrator-latest-en": "Create the first company administrator (Root Account)", "adding_a_security_administrator_to_security_group_manually-latest-en": "Add a security administrator to security group manually", "removing_a_security_administrator_from_a_security_group_manually-latest-en": "Remove a security administrator from a security group manually", "removing_a_security_administrator_from_an_organization-latest-en": "Remove a security administrator from an organization", "removing_a_federated_security_administrator_from_all_organizations-latest-en": "Remove a federated security administrator from all organizations (Hard Delete)", "inviting_and_managing_manually-latest-en": "Inviting and managing manually", "managing_security_administrators_with_entra_id-latest-en": "Managing Security Administrators with Entra ID", "adding_a_security_administrator_through_entra_id-latest-en": "Add a security administrator through Entra ID", "deactivating_a_security_administrator_through_entra_id-latest-en": "Deactivate a security administrator through Entra ID", "deleting_a_security_administrator_through_entra_id-latest-en": "Delete a security administrator through Entra ID", "removing_a_security_administrator_from_a_security_group_thouygh_entra_id-latest-en": "Remove a security administrator from a security group through Entra ID", "user_limitations-latest-en": "Security administrator limitations", "managing_through_entra_id-latest-en": "Managing through Entra ID", "creating_security_groups-latest-en": "Create a security group manually", "deleting_security_group-latest-en": "Delete a security group", "managing_security_groups-latest-en": "Managing security groups", "assigning_roles_to_security_groups_member_first_approach-latest-en": "Assign roles to a security group (Indirect Assignment)", "assigning_roles_to_users_direct_assignment-latest-en": "Assign roles directly to a security administrator", "organization_first_approach-latest-en": "Add access from the organization view", "granting_access-latest-en": "Granting access", "viewing_role_assignments_for_a_security_group-latest-en": "View role assignments for a security group", "viewing_role_assignments_for_an_organization-latest-en": "View role assignments for an organization", "checking_effective_roles_for_a_user-latest-en": "Check a security administrator's effective access", "inspecting_access-latest-en": "Inspecting access", "using_inheritance_effectively-latest-en": "Using inheritance effectively", "removing_a_direct_role_assignment-latest-en": "Remove a direct role assignment from a security administrator", "removing_a_role_assignment_from_a_security_group-latest-en": "Remove a role assignment from a security group", "removing_role_assignments_from_organization_view-latest-en": "Remove a role assignments from the organization view", "revoking_access-latest-en": "Revoking access", "constraints_gotchas-latest-en": "Role assignment limitations", "faq_troubleshooting_role_assignments-latest-en": "Troubleshooting role assignments", "managing_role_assignments-latest-en": "Managing role assignments", "managing_security_administrators-latest-en": "Managing security administrators", "microsoft_entra_id_integration-latest-en": "What is Microsoft Entra ID integration", "sso_federation_setup-latest-en": "Configure SSO Federation", "sso_federation-latest-en": "SSO Federation", "scim_provisioning_configuration-latest-en": "Configure SCIM provisioning", "filtering_which_users_and_groups_synchronize-latest-en": "Filter which users and groups synchronize", "activating_provisioning-latest-en": "Activate provisioning", "verifying_that_provisioning_works-latest-en": "Verify that provisioning works", "scim_provisioning-latest-en": "SCIM provisioning", "troubleshooting_entra_id_integration-latest-en": "Troubleshoot Entra ID integration", "limitations_of_entra_id_integration-latest-en": "Limitations of Entra ID integration", "best_practices_for_entra_id_integration-latest-en": "Best practices for Entra ID integration", "troubleshooting_integration-latest-en": "Deprovision Entra ID integration", "microsoft_entra_id_integration-2-latest-en": "Setting up Microsoft Entra ID integration", "what_changes_when_you_migrate-latest-en": "What changes when you migrate", "migration_approaches_phased_or_big_bang-latest-en": "Migration approaches: phased or single-cutover", "reversibility_of_the_migration-latest-en": "Reversibility of the migration", "understanding_the_migration-latest-en": "Understanding the migration", "assessing_your_current_state-latest-en": "Assessing your current state", "pre_migration_decisions-latest-en": "Pre-migration decisions", "migration_checklist-latest-en": "Migration checklist", "the_migration_sequence-latest-en": "The migration sequence", "preparing_for_migration-latest-en": "Preparing for migration", "reviewing_existing_access_after_turning_on_rbac-latest-en": "Review existing access after turning on RBAC", "migrating_from_direct_role_assignments_to_security_groups-latest-en": "Migrate from direct role assignments to security groups", "cleaning_up_redundant_direct_role_assignments-latest-en": "Remove redundant direct role assignments", "removing_partner_security_administrators_from_company_memberships-latest-en": "Remove partner security administrators from company memberships", "performing_the_migration-latest-en": "Performing the migration", "verifying_access_after_migration-latest-en": "Verify access after migration", "verifying_the_migration-latest-en": "Verifying the migration", "common_migration_issues-latest-en": "Common migration issues", "migrating_to_elements_rbac-latest-en": "Migrating to Elements RBAC", "roles_and_permissions-latest-en": "Role catalogue", "limitations-latest-en": "System limits", "reference_intro-latest-en": "RBAC reference", "what_is_elements_rbac-latest-en": "Access control" } }