Permissions for Integrated with Veracode IAM accounts
User permissions
| Permission | Platform Administrator | Platform Team Admin | Security Labs Administrator | Security Labs Manager | Security Labs User |
|---|---|---|---|---|---|
| View all users in their team | Y | Y | Y | Y | N |
| Export user progress into CSV | Y | Y | Y | Y | N |
| View and delete individual user progress, and export into CSV | Y | Y | Y | Y | N |
| Change username, email, or password | Y | Y | N | N | N |
| Update participant status | Unsupported | Unsupported | Unsupported | Unsupported | Unsupported |
| Disable a user | Unsupported | Unsupported | Unsupported | Unsupported | Unsupported |
| Bulk upload users using identity APIs | Y | N | N | N | N |
| Add new users manually | Y | Y | N | N | N |
| View pending user invites | Unsupported | Unsupported | Unsupported | Unsupported | Unsupported |
| Uninvite users | Unsupported | Unsupported | Unsupported | Unsupported | Unsupported |
| Resend invite emails to users | Unsupported | Unsupported | Unsupported | Unsupported | Unsupported |
| Remove a Security Labs Manager | Y | Y | N | N | N |
| Remove a Platform Administrator | N | N | N | N | N |
| Remove a Platform Team Admin | Y | N | N | N | N |
| Remove a Security Labs Administrator | Y | N | N | N | N |
Team permissions
| Permission | Platform Administrator | Platform Team Admin | Security Labs Administrator | Security Labs Manager | Security Labs User |
|---|---|---|---|---|---|
| Create a new team | Y | N | N | N | N |
| Make a team visible to users, or add the team to default teams | Unsupported | Unsupported | Unsupported | Unsupported | Unsupported |
| Add or remove a default team | Unsupported | Unsupported | Unsupported | Unsupported | Unsupported |
| Add or remove a public team | Unsupported | Unsupported | Unsupported | Unsupported | Unsupported |
| Rename a team | Y | Y | N | N | N |
| Assign or remove teams from users | Y | Y | N | N | N |
| Assign a Security Labs Manager to a team | Y | Y | N | N | N |
| Assign a team admin to a team | Y | N | N | N | N |
| View teams | Y | Y | N | N | N |
Campaign permissions
| Permission | Platform Administrator | Platform Team Admin | Security Labs Administrator | Security Labs Manager | Security Labs User |
|---|---|---|---|---|---|
| Customize conclusions for lessons | Y | N | Y | N | N |
| View assigned campaigns and assignments | Y | Y | Y | Y | N |
| Create a new campaign manually | Y | Y | Y | Y | N |
| Create a new campaign via the campaign wizard | Y | Y | Y | Y | N |
| Update the name and settings of a campaign | Y | Y | Y | Y | N |
| Export campaign progress | Y | Y | Y | Y | N |
| View reporting for a campaign | Y | Y | Y | Y | N |
| Pause and start campaigns | Y | Y | Y | Y | N |
| Assign or remove a campaign for teams | Y | Y | Y | Y | N |
| Add assignments to a campaign | Y | Y | Y | Y | N |
| Update campaign or assignment start and end dates | Y | Y | Y | Y | N |
| Add or remove lessons (content) from an assignment | Y | Y | Y | Y | N |
| Create email notifications for incomplete assignments for users and managers | Y | Y | Y | Y | N |
| View progress based on content | Y | N | Y | N | N |
| Customize content | Y | N | Y | N | N |
Reporting permissions
On the Reporting page in Security Labs, these are the permissions:
| Permission | Platform Administrator | Platform Team Admin | Security Labs Administrator | Security Labs Manager | Security Labs User |
|---|---|---|---|---|---|
| View report for a time range | Y | Y | Y | Y | N |
| View report for a campaign | Y | Y | Y | Y | N |
| View report for a role | Y | Y | Y | Y | N |
Module permissions
| Permission | Platform Administrator | Platform Team Admin | Security Labs Administrator | Security Labs Manager | Security Labs User |
|---|---|---|---|---|---|
| View custom content | Y | N | Y | N | N |
| Add, edit, or remove custom modules | Y | N | Y | N | N |
| Add, edit, and remove lessons in a custom module | Y | N | Y | N | N |
| Preview custom lesson content | Y | N | Y | N | N |
Organization permissions
| Permission | Platform Administrator | Platform Team Admin | Security Labs Administrator | Security Labs Manager | Security Labs User |
|---|---|---|---|---|---|
| Enable or disable leaderboards | Y | N | Y | N | N |
| Set leaderboard lookback time. This permission allows administrators to set whether the leaderboard shows scores based on activity from the last 30 days, by default, or a different period | Y | N | Y | N | N |
| Change an organization name | Unsupported | Unsupported | Unsupported | Unsupported | Unsupported |
| Add or remove organization domains | Unsupported | Unsupported | Unsupported | Unsupported | Unsupported |
| Change an organization logo | Unsupported | Unsupported | Unsupported | Unsupported | Unsupported |
| Protect or unprotect an organization | Unsupported | Unsupported | Unsupported | Unsupported | Unsupported |
| Enable or disable Contact A Teammate through Slack, Teams, and Email | Y | N | Y | N | N |
| Integrate with Slack | Y | N | Y | N | N |
| Enable or disable certificates | Y | N | Y | N | N |
| Enable or disable ratings | Y | N | Y | N | N |
| Toggle enforce SAML | Unsupported | Unsupported | Unsupported | Unsupported | Unsupported |
| Add, edit, or remove SAML gateway | Unsupported | Unsupported | Unsupported | Unsupported | Unsupported |
| View, rotate, or disable API credentials | Y | N | Y | N | N |