Create a user in the Veracode Platform
To create a new user in the Veracode Platform, go to the Administration page. You can also create a user by copying an existing one. The user type can be either a UI user (human user) or an API user (non-human user).
If you want to create multiple UI user accounts in a single bulk operation, use the createuser.do API, as explained in API wrapper examples: Create multiple users.
Create a user
Add a new user to your organization. You can also create a user with the Identity APIs.
Before you begin:
You must have the Administrator or Team Admin role.
To complete this task:
-
Sign in to the Veracode Platform.
-
From the gear icon
, select Admin. The Admin page opens.
-
On the Users tab, select Add New User.
-
In the User Settings section, enter the user's first name, last name, and email address.
-
Select from the following options:
-
User Type: to create an account for a human user, select UI User (the default). To create an account for a non-human user, select API User.
-
Login Enabled: to enable login to the Veracode Platform, select Yes (the default). To disable login, select No.
-
Login Type: to require the user to sign with a password, select Password (the default). To sign in using single sign-on (SSO), select SAML and configure SAML access.
-
Requires MFA: to require multifactor authentication (MFA) during sign in, select Yes. The default is No.
-
Restrict Login IP: to restrict the IP range for signing in to the Veracode Platform, select Yes and enter a comma-separated list of allowed IP addresses. The default is No.
-
-
In the Access Settings section, select from the following options:
-
Team Memberships: to add the user to one or more teams, select Select Teams and select the team names. If you're creating an API user account, you can restrict it to selected teams or, to give it access to every application in its organization, select No Team Restrictions.
-
User Roles: select the checkbox next to each UI user role or API user role, depending on the account type, to assign to the user. Only the Executive, Greenlight IDE User, Policy Administrator, Security Insights, and Security Lead roles do not require team membership.
noteAssigning the eLearning role has special implications.
-
Allowed Scan Types: this field opens depending on which checkbox you select for User Roles. You can select to allow the user to submit all scan types or restrict the user to specific scan types.
-
-
Optionally, in the Metadata section, enter custom metadata for the user in the Custom fields. These metadata fields are visible in the eLearning Account Report. You can use these reports to aggregate eLearning statistics by different values that may be unique to your organization.
-
To create the user, select Save. Veracode sends new users an email with a one-time activation link to activate their Veracode Platform account. The activation link is valid for seven days.
Copy a user
Create a user by copying an existing user. This action copies the user’s access settings and metadata to the new user.
Before you begin:
-
You must have the Administrator or Team Admin role.
-
You can only copy the following users:
- Users who don't have the Administrator or Security Lead role.
- If you have the Team Admin role, the user must belong to a team that you manage.
- If your organization created the user with Just-in-Time (JIT) Provisioning, the JIT configuration must have the User Data Updates option set to Prefer Veracode User Data.
To complete this task:
- Sign in to the Veracode Platform.
- From the gear icon
, select Admin. The Admin page opens.
- On the Users tab, in the All Users table, locate the user to copy.
- Select Actions > Copy User. The Add New User page opens.
- Enter the user's first name, last name, and email address. The remaining settings match those of the user you copied.
- Optionally, change any of the settings or accept the copied settings. For details about each field on the Add New User page, see Create a user.
- To create the user, select Save.
New users receive an email from Veracode. This email includes a one-time activation link for users to activate their account in the Veracode Platform. The account activation link is valid for seven days.