OneSpan Threat View enables you to configure your own user accounts and offers different types of user accounts.
Types of user accounts and permissions: Threat View user roles
Threat View organizes the user accounts in three different roles:
Owner of the Threat View tenants.
Permissions: users with this role have full access to all Threat View functionalities and has all user management permissions.
Used to install and set up Threat View securely, and to manage other user accounts.
Permissions: users with the User Administrator have most user management permissions.
Not permitted: a User Administrator does not have access to the Threat View Dashboard and event reports.
Used to access and use the solution.
Permissions: users with the Insights Viewer roles can access and view the Dashboard and Threat event reports.
Not permitted: an Insights Viewer does not have any user management permissions.
Account Owner
Users with this role are owners of the Threat View tenants and have full access to all Threat View functionalities. The Account Owner user role also has permissions to perform all user management tasks.
User Administrator
The User Administrator account is used to install and set up Threat View securely, and to manage other user accounts. The User Administrator user role has permissions to perform most user management tasks, including assigning roles to other users.
During the setup of your Threat View solution, OneSpan creates a deployment secret containing the user name and initial password for the first Threat View User Administrator. The default credentials are:
User name: admin@onespan
Password: Demo1234567890
If you prefer, you can change these default credentials: in the threat-view/.env file of the product package, change the default values to your preferred values for the following parameters:
SECRET_IDENTITY_MANAGEMENT_USER_ADMINISTRATOR_USER_NAMESECRET_IDENTITY_MANAGEMENT_USER_ADMINISTRATOR_PASSWORD
To use the User Administrator account
Open the Threat View Administration Interface.
Log in to Threat View with the initial credentials you received from OneSpan.
Upon this first log in, you are prompted to change your password.
Threat View enforces password strength rules, i.e., if the new password does not comply with these rules, the application will terminate.
After changing the password, you are logged in and can start using Threat View and manage other user accounts.
Insights Viewer
Insights Viewer user roles are intended to provide users access to the solution and allow them using it. Users with an Insights Viewer role can access Threat View as soon as the Account Owner has created their user account. The Insights Viewer can log in to Threat View and perform the actions according to the permissions for the assigned user role.