Welcome to Elements topic index

Open the interactive Welcome to Elements user guide

Topics that several products share are listed under the product that owns them.

• Introduction to the WithSecure Elements solution
• Logging in
• Log in to non-federated domains
• Log in to federated domains
• Multi-factor authentication
• MFA methods
• Choose multi-factor authentication
• Remove a multi-factor authentication
• Use device biometrics
• Federated single sign-on
• Prerequisites
• Before implementing single sign-on (SSO)
• Set up federated single sign-on with Microsoft Entra ID
• Link user identities
• Remove federation from a domain
• User management
• About access rights
• Access rights by role
• Move between the managed companies
• Elements Identity and Access Management (IAM) role
• Elements IAM role properties
• Add a new administrator
• Add a new service partner
• Edit or remove administrators
• Create an API client
• Delete an API client
• Recover your password
• Change your account details
• Taking Elements products into use
• Adding a customer company
• Assign a subscription key for a customer company
• Order products for a new customer company
• View available product subscriptions
• Change the subscription key
• Upgrading your subscriptions
• Upgrading your subscriptions
• Security services overview
• Adding devices for management
• Distributing WithSecure software
• Download software from Elements Security Center
• Manage automatic deletion of devices
• Manage invitations
• Enhancing device management with custom labels
• Add device labels
• Managing devices in Elements Security Center
• Managing asset groups
• Create asset groups
• Add devices to asset groups
• Remotely manage a device
• Automatically delete devices
• View devices based on the Active Directory structure
• Customize the Devices view
• Request diagnostic data
• Elements data recovery
• Interacting with WithSecure Services
• WithSecure Sample Validation
• Service Offering
• False Detections (Incorrectly Detected)
• Missed Detections (Not Detected)
• Scope clarification
• Getting started with WithSecure Sample Validation: What you need and Why it helps
• Service Availability
• Service Delivery
• Creating and viewing sample validation requests in the request views
• Choosing the correct Sample Type
• Submit a file sample
• Submit a URL sample
• Submit an email sample
• Managing and viewing Open Requests
• Add and View Comments
• Resolution
• Support and escalations
• Other submissions
• Best practices for gathering samples and reporting ransomware
• Gathering file samples
• Gather a File Sample for Windows
• Gather a File Sample for macOS
• Gather a File Sample for Linux
• Collect quarantined files using Quarantine Dumper Tool
• Gathering URL samples
• Gather a URL sample for Windows
• Gather a URL sample for macOS
• Gather a URL sample for Linux
• Gathering email samples
• Gather an Email Sample for Windows
• Gather an Email Sample for macOS
• Gather an Email Sample for Linux
• Report application recognized as malicious (Android)
• Reporting ransomware or active threats (no detection observed)
• Report Ransomware or Active Threats (No Detection Observed) Windows
• Report Ransomware or Active Threats (No Detection Observed) macOS/Linux
• Provide information for ransomware reporting
• AI Security
• Reviewing AI assets on devices
• View the AI assets installed on devices
• Approve or disallow an AI asset
• Managing AI identities
• View AI identities
• Set risk and response options for AI identities
• Monitoring AI use with the AI Security dashboard
• View the AI Security dashboard
• Elevate Requests
• Create a request
• View and manage request details
• Third-party integrations
• Integrating WithSecure Elements with Autotask PSA
• Get integration credentials from Autotask
• Configure Autotask PSA integration in Elements Security Center
• Integrating WithSecure Elements with ConnectWise PSA
• Configure ConnectWise PSA integration in Elements Security Center
• Integrating WithSecure Elements with HaloPSA
• Configure HaloPSA integration in Elements Security Center
• Access control
• Core concepts
• The partner-company business model
• The subject-role-resource model
• What is an organization
• Organizational hierarchy and inheritance
• Organization types: solution provider, service partner, and company
• What is a security administrator
• Partner and company users
• What is a security group
• Locally created and provisioned security groups
• What is a role
• Large-scope roles: Elements Editing All and Elements Reading All
• What is a role assignment
• Direct, indirect, and inherited role assignments
• Effective permissions
• Access without membership
• Planning your deployment
• Planning your deployment as a partner
• Planning your deployment as a company
• Best practices for Elements RBAC
• Best practices for organizations
• Best practices for security groups
• Best practices for role assignments
• Getting started
• Turn on RBAC for an organization
• Set up Elements RBAC for partners
• Set up Elements RBAC for companies
• Organizing your environment
• Visibility and isolation between organizations
• What happens when an organization moves in the hierarchy
• Create a service partner
• Move a company to another service partner
• What restricting partner access means
• Restrict partner access to a company
• Organization limitations
• Managing security administrators
• Account types and ownership
• Account Ownership: federated and local accounts
• Root User
• Organization membership and access
• Cross-tenant access policies
• Inviting and managing manually
• Managing Security Administrators manually
• Inviting Users (no Entra ID Provisioning)
• Invite Security Administrator to Partner Organizations
• Invite Security Administrator to company organization
• Create the first company administrator (Root Account)
• Add a security administrator to security group manually
• Remove a security administrator from a security group manually
• Remove a security administrator from an organization
• Remove a federated security administrator from all organizations (Hard Delete)
• Managing through Entra ID
• Managing Security Administrators with Entra ID
• Add a security administrator through Entra ID
• Deactivate a security administrator through Entra ID
• Delete a security administrator through Entra ID
• Remove a security administrator from a security group through Entra ID
• Security administrator limitations
• Managing security groups
• Create a security group manually
• Delete a security group
• Managing role assignments
• Granting access
• Assign roles to a security group (Indirect Assignment)
• Assign roles directly to a security administrator
• Add access from the organization view
• Inspecting access
• View role assignments for a security group
• View role assignments for an organization
• Check a security administrator's effective access
• Using inheritance effectively
• Revoking access
• Remove a direct role assignment from a security administrator
• Remove a role assignment from a security group
• Remove a role assignments from the organization view
• Role assignment limitations
• Troubleshooting role assignments
• Setting up Microsoft Entra ID integration
• What is Microsoft Entra ID integration
• SSO Federation
• Configure SSO Federation
• SCIM provisioning
• Configure SCIM provisioning
• Filter which users and groups synchronize
• Activate provisioning
• Verify that provisioning works
• Troubleshoot Entra ID integration
• Limitations of Entra ID integration
• Best practices for Entra ID integration
• Deprovision Entra ID integration
• Migrating to Elements RBAC
• Understanding the migration
• What changes when you migrate
• Migration approaches: phased or single-cutover
• Reversibility of the migration
• Preparing for migration
• Assessing your current state
• Pre-migration decisions
• Migration checklist
• The migration sequence
• Performing the migration
• Review existing access after turning on RBAC
• Migrate from direct role assignments to security groups
• Remove redundant direct role assignments
• Remove partner security administrators from company memberships
• Verifying the migration
• Verify access after migration
• Common migration issues
• RBAC reference
• Role catalogue
• System limits

All user guide topic indexes