This is a global or platform-wide user. A Platform Administrator has full access to the platform administrative console and can perform any of the following organization-wide operations:

• Changing subscriptions for Rapid7 products and services
• Adding, deleting, and managing users
• Changing the organization profile
• Managing the platform-wide settings
• Add other platform administrators
• Add users to provide access to the Customer Portal 
• We recommend having at least 2 platform administrators so the other administrator can act as a backup.

This is a product specific user. A Product Administrator can view and access all data, perform any functions within a product, and manage product settings. Product Admins have permission to add, manage, and delete other users to/from the same product, as well as change user roles within a product.

Users with Read/Write access can view and edit all data within the product or service they are assigned. Read/Write Users cannot perform any administrative actions for the product or the Command Platform or change any product settings.

Read-Only Users can view all data within a product, but they cannot edit or manage it in any way.

Product roles assigned to InsightVM users at the Platform level are ignored in favor of the more detailed and specialized InsightVM user roles, which are assigned to users by an product admin in InsightVM. That means that Platform users who are also InsightVM users are given InsightVM permissions associated with whatever role they’re assigned in InsightVM. Platform users who are not also InsightVM users are treated as global administrators.

InsightConnect uses standard Admin, Read Write, and Read Only product roles.

A Platform Administrator can add users to the Command Platform and grant them access to individual Rapid7 products as needed.

To add a Command Platform user:

1. Sign in to the Command Platform.
2. From the left menu of the Platform Home page, click User Management.
3. Click Add User. The Add User panel appears.
4. Enter user details.
   • Email: This must be a valid email address associated with the user. You can use a distribution list as the user email address, but if you do, assign Read Only access to the associated user account and verify that the account does not have Administrator privileges.
   • First name, last name, and time zone: These fields are editable after the account is created from the user’s Profile Settings.
5. Click Next.
6. Select the appropriate user role options.
   • To make this user a Platform Administrator and give them the ability to manage Command Platform users, toggle the Platform Admin option on.
   • If applicable, select the organizations within your company that you want this user to be a part of.
   • Choose a Product Role to establish the level of privilege the user will have for any Rapid7 products they are given access to. The default role is Read Only.

7. Click Next.
8. Select the Rapid7 products you want this user to have access to. If your company has multiple organizations, you must select products for each organization the user is associated with.
9. Click Submit.

The new user will receive an email invitation to activate their Command Platform account. New users also have automatic access to the Customer Portal .

A Product Administrator can add users to the Rapid7 product they have administrative access to. If you have multiple organizations associated with your Command Platform instance, note that you can only add users to the organizations you have administrative access to.

To add a Rapid7 product user:

1. Sign in to the Command Platform.
2. Open the Rapid7 product you want to add a user to.
3. Go to the user management page, which varies by product.
   • InsightIDR: Settings > User Management
   • InsightOps: Settings > User Management
   • InsightVM: Administration > Users
   • InsightAppSec: Settings > User Accounts
   • Rapid7 Services: Left Menu > User Management
4. Click Add User button. The Add User panel appears.
5. Enter user details.
   • Email: This must be a valid email address associated with the user. You can use a distribution list as the user email address, but if you do, assign Read Only access to the associated user account and verify that the account does not have Administrator privileges.
   • First name, last name, and time zone: These fields are editable after the account is created from the user’s Profile Settings.
6. Click Next.
7. Do one of the following:
   • If this is an existing Command Platform user, confirm you want to provide this user product access by clicking Add User. They will be added automatically and given the product role specified by the Platform Administrator that created their Command Platform account.
   • If this is a new Command Platform user, select a Product Role to establish the level of privilege the user will have.
8. Click Submit.

1. From the User Management page, click the edit icon. A panel appears with editing options.
2. Select User Details, Role Management, or Product Assignment.
   • User Details - Edit the user’s first name, last name, reset their multi-factor authentication, or reset their account
   • Role Management - Edit the user’s roles, and enable or disable Platform Administration access
   • Product Assignment - Add and remove product assignments
3. When you’re done making edits, click Save.

1. From the User Management page, click the delete icon.
2. Click the Yes, remove user button to confirm.