Permission-based user management

This is a global or platform-wide user. A Platform Administrator has full access to the platform administrative console and can perform any of the following organization-wide operations:

• Changing subscriptions for Rapid7 products and services
• Adding, deleting, and managing users
• Changing the organization profile
• Managing the platform-wide settings
• Add other platform administrators
• Add users to provide access to the Customer Portal
• We recommend having at least 2 platform administrators so the other administrator can act as a backup.

This is a product specific user. A Product Administrator can view and access all data, perform any functions within a product, and manage product settings. Product Admins have permission to add, manage, and delete other users to/from the same product, as well as change user roles within a product.

Users with Read/Write access can view and edit all data within the product or service they are assigned. Read/Write Users cannot perform any administrative actions for the product or the Insight platform or change any product settings.

Read-Only Users can view all data within a product, but they cannot edit or manage it in any way.

Product roles assigned to InsightVM users at the Platform level are ignored in favor of the more detailed and specialized InsightVM user roles, which are assigned to users by an product admin in InsightVM. That means that Platform users who are also InsightVM users are given InsightVM permissions associated with whatever role they’re assigned in InsightVM. Platform users who are not also InsightVM users are treated as global administrators.

InsightConnect uses standard Admin, Read Write, and Read Only product roles.

As an Insight Platform User you can request access to any Platform product your company is subscribed to, regardless of your user role. From the Insight Platform home page, click the Request Access button for the product you want access to.

A Platform Administrator at your company will grant or reject access and you'll receive an email regarding the status of your request.

If you're a Product Administrator, you can request a free trial of a product your organization isn't currently subscribed to. From the Insight Platform home page, click the Start trial button of the product you want to try out.

1. Go to the User Management page.
2. Select the User Requests tab. "New User" requests are displayed first by default. If you need to view and manage Product Access, Product Trial, or External User requests instead, you can go to the relevant tab.

An Insight Platform Administrator can add users to the Insight Platform and grant them access to individual Insight products as needed.

To add an Insight Platform user:

1. Log in to the Insight Platform.
2. From the left menu of the “Platform Home” page, click the User Management icon.
3. Click the Add User button. The “Add User” panel appears.
4. Enter user details.
   • Email: Valid email address associated with the user. You can use a distribution list as the user email address, but if you do, assign read-only access to the associated user account, and verify that the account does not have administrative privileges.
   • First and Last Name: User’s name. These fields are editable after account creation from the user’s Profile Settings.
   • Time Zone: User’s time zone. This field is editable after account creation from the user’s Profile Settings.
5. Click Next.
6. Select the appropriate user role options.
   • To make this user a Platform Administrator and give them the ability to manage Insight Platform users, toggle the Platform Admin option on.
   • If applicable, select the organizations within your company that you want this user to be a part of.
   • Choose a Product Role to establish the level of privilege the user will have for any Insight products they are given access to. The default role is “Read Only.”

1. Click Next.
2. Select the Insight products you want this user to have access to. If your company has multiple organizations, you must select products for each organization the user is associated with.
3. Click Submit.

The new user will receive an email invitation to activate their Insight Platform account. New users also have automatic access to the Customer Portal.

An Insight Product Administrator can add users to the Insight product they have administrative access to. If you have multiple organizations associated with your Insight Platform instance, note that you can only add users to the organizations you have administrative access to.

To add an Insight product user:

1. Log in to the Insight Platform.
2. Open the Insight product you want to add a user to.
3. Go to the user management page, which varies by product.
   • InsightIDR: Settings > User Management
   • InsightOps: Settings > User Management
   • InsightVM: Administration > Users
   • InsightAppSec: Settings > User Accounts
   • Rapid7 Services: Left Menu > User Management
4. Click Add User button. The “Add User” panel appears.
5. Enter user details.
   • Email: Valid email address associated with the user. You can use a distribution list as the user email address, but if you do, assign read-only rights to the associated user account and verify that the account has no administrative privileges.
   • First and Last Name: User’s name. These fields are editable after account creation from the user’s Profile Settings.
   • Time Zone: User’s time zone. This field is editable after account creation from the user’s Profile Settings.
6. Click Next.
7. Do one of the following:
   • If this is an existing Insight Platform user, confirm you want to provide this user product access by clicking Add User. They will be added automatically and given the product role specified by the Platform Administrator that created their Insight Platform account.
   • If this is a new Insight Platform user, select a Product Role to establish the level of privilege the user will have.
8. Click Submit.

1. From the User Management page, click the pencil icon. A panel appears with editing options.
2. Select User Details, Role Management, or Product Assignment.
   • User Details - Edit the user’s first name, last name, reset their multi-factor authentication, or reset their account
   • Role Management - Edit the user’s roles, and enable or disable Platform Administration access
   • Product Assignment - Add and remove product assignments
3. When you’re done making edits, click Save.

1. From the User Management page, click the trashcan icon.
2. Click the Yes, remove user button to confirm.

You don’t have to contact Rapid7 to delete your company’s trial Insight Platform account. You can save time and delete it yourself.

1. Delete all Insight Platform user accounts from the User Management page.
2. Click the gear icon and click Company Settings.
3. Click Delete this Account in the top right corner of the page.

Deleting your company’s trial Insight Platform account removes the associated customer record along with all associated organizations, and product licenses from the Insight Platform.