Manage users

Manage users in the Veracode Platform, including creating and deleting users, editing user accounts, and monitoring user activity.

To create users or manage users in the Veracode Platform, from the gear menu in the upper-right corner, select Admin and select the Users tab.

Prerequisites

• To create and update users, you must have a UI user account with the Administrator or Team Admin role.
• To delete users, reset passwords, request email verifications, or monitor user activity, you must have a UI user account with the Administrator role.

Create a user

See Create users.

View user details

View detailed information about all users in your organization.

List users

View a detailed list of users in the Veracode Platform or with the Identity REST API.

The All Users page shows the list of all user accounts in your organization.

Before you begin:

• If you plan to restrict the user to a specific IP address range, ensure you know the user's IP range. If you set the IP range incorrectly, the user can't sign in.

To complete this task:

1. Sign in to the Veracode Platform.
2. From the gear icon , select Admin. The Administration page opens.
3. On the Users tab, in the All Users page, you see the list of Veracode users.
4. The All Users page displays the following information:

• User: The first and last name associated with the user account. To edit the user's information, select their name.
• Email: The user's email address.
• User Type: Indicates whether the user is a UI user or API user.
• Login Enabled: Shows whether login is enabled for the user. To turn on or turn off login for the user, select or clear this checkbox.
• Actions: Perform certain actions on the user. To see the list of available actions, select the actions menu .

Find users

To find users, enter a name, username, email address, or application profile ID in the search field. Searches are not case-sensitive. The search filter remains until you manually clear it, or you sign out.

To find a user, you can:

• Find the user in the table using the Page controls.
• Filter the list of users by one of the filter options provided (Role, Team, SAML type, Login Enabled, User Type).
• Search for the username (first or last name) using the Search field.
• Select the user from the Load User Details dropdown menu. Then, type the user's last name to go to that user and press Enter to select the user.

Use filters

Filter users by categories such as role, login status, team membership, or account type.

To complete this task:

1. Select Filter by.
2. Choose the filter values.
3. Select Apply.

Filters remain active across Veracode Platform sessions. To remove an individual filter, select close . To remove all filters, select Clear Filters.

Configure table columns

Customize the table by selecting which columns appear and adjusting their order.

To complete this task:

1. Select Set Columns.
2. Select columns to include or clear columns to remove.
3. Select Apply.
4. To change the column order, drag the column header to a new position.

Column settings remain until changed. To reset to default settings, select Set Columns > Restore defaults > Apply.

Edit a user

Update an existing user account, including the user's details, sign in settings, user roles, and metadata.

You can also update a user with the Veracode Identity APIs.

note

You can't change an existing UI user to an API user and vice versa. You must create a new user account and select the API User option. If you change the user's email address, we email the new address to verify it. The change can't complete until the user performs the verification. If the user had previously used their email address to log in to the Veracode Platform, they must use the new verified address.

Before you begin:

• Ensure you know the user's IP range. If you set the IP range incorrectly, the user can't sign in.
• If you need to change the assigned roles, review the user roles and permissions, and the requirements, so you know which UI roles or API roles to assign.

To complete this task:

1. Sign in to the Veracode Platform.
2. From the gear icon , select Admin. The Administration page opens.
3. On the Users tab, select the user's username or select Edit. The Edit User page opens.
4. Update the user's settings. Settings you can't change are disabled.
5. Select Save.

View the user activity log

View the log of user activity for the users you manage. The user activity log has the following information:

• The user's sign in details, such as the date and time of each sign in, and the IP address used.
• The status of each sign in attempt - whether it succeeded or failed.
• The update history for the user's account, such as changes to roles, team assignments, or access levels.

The activity log refreshes every four hours. Depending on when you generate the activity log, you might not retrieve the most recent sign in attempt information.

note

The activity log doesn't display any user activity information if the user never logged in to the Veracode Platform.

To complete this task:

1. Sign in to the Veracode Platform.
2. From the gear icon , select Admin. The Administration page opens.
3. Select the Users tab. In the All Users page, you see a list of Veracode users.
4. Select the user's name for which you want to see the activity log. The Edit User page opens.
5. Under User Settings, select the View Activity Log link. The Activity Log page opens.
6. To generate a CSV file of the activity log, under User Activity Log, select Generate CSV.
7. To download the CSV file, select Download CSV.

Request user email verification

To improve the security of user accounts and enable users to access the Veracode Community directly from the Veracode Platform, you can request that users verify the email address for their user accounts.

To complete this task:

1. Sign in to the Veracode Platform.
2. From the gear icon , select Admin. The Administration page opens.
3. In the Users tab, select the user whose email address you want to verify.
4. Select Send verification email. We send the user an email with the subject line Action Required: Verify Email Address. The verification link expires after seven days.

Reset a user's password

Users can request a password reset on the Veracode Platform sign in page, or by having an Administrator issue a password reset email.

note

This procedure applies to both UI users and API users.

Before you begin:

• Verify the identity and email address of the user before issuing a password reset.

To complete this task:

1. Sign in to the Veracode Platform.
2. From the gear icon , select Admin. The Administration page opens.
3. On the Users tab, select a user.
4. Verify the email address of the user. If you need to change the email address, save your changes before selecting the password reset link.
5. Select Send a Change Password Email.
6. Select Ok. The user receives an email containing a special link to allow them to reset their password. The link expires one hour after we send the email.

Delete a user

There are two ways to remove user access to Veracode in the Veracode Platform:

• Temporarily deactivate the user by clearing the Login Enabled field.
• Permanently delete the user from the Veracode Platform.

You can also perform these actions with the Identity API.

Caution

You can't undo the action of deleting a user. If you want to temporarily deactivate the user, select No in the Login Enabled field. Then, select Save.

note

Removing a user who hasn't taken any eLearning courses returns their eLearning seat to the license pool. Removing a user who has already consumed eLearning courses or assessments doesn't affect their eLearning seat.

To complete this task:

1. Sign in to the Veracode Platform.
2. From the gear icon , select Admin. The Administration page opens.
3. On the Users tab, locate the user to delete.
4. To delete the user, select Delete User.