Add Privileged Users
You can add new privileged users (analysts), assign roles and permissions, assign categories, and create a privileged user as a member.
Just-In-Time User Provisioning
Analysts can automatically onboard the Analyst Portal using Just-In-Time (JIT) user provisioning, without the need to manually create user accounts. Analysts can configure Single Sign-On (SSO) through the Security Assertion Markup Language (SAML), which automatically creates and authenticates users into the Analyst Portal. To configure SAML, see Configure SAML 2.0 as the Authentication Method.
Before you Start
You must have the View, Create and Update permissions to the Privileged User module.
Steps
To add privileged users, follow these steps:
Go to Administration > User Management.
Select Privileged Users and click Add. Enter the required details in the User Details tab.
Enter the user's email. The email address is used to sign in to the Collaborate (CSAP) application, receive email alerts and one-time passwords (OTP) for authentication.
Enter the full name of the user. For example, John Doe.
Enter the user's phone number in the area code, phone number, and extension format.
Select a role for the user. You can choose from the preconfigured system roles or choose a custom role for the user. See Role-Based Access Control.
Select categories for the user. Users can publish alerts only with the assigned categories.
Note
Admin and Root Admin roles can access all categories by default. The category field is hidden if you choose one of these roles.
Turn on the Also create this user as Member? toggle to add the user as a member and provide access to the Collaborate Member Portal. This creates a separate member role for the user and an invitation email is sent to the user's email account, prompting them to sign in to the Member Portal and complete their account setup. By selecting this option, the Recipient Groups and Contact Details tabs become available in the Add Privileged User creation form. To add member-specific details, see Add Member Details.
Select Active to activate the user. Inactive users cannot sign into the Collaborate application. By default, the user is activated.
Select Allow Publishing to All Users to allow the user to publish alerts to all other users from the Analyst Portal. This provides the user publisher permissions.
Select Send Welcome Email to send an invitation email to the user you are adding to Collaborate. The welcome email contains a link to sign into the Collaborate application.
Click Add.
An email invite is sent to the user, prompting them to sign in to Collaborate and complete their account setup within 72 hours after which the link expires.
Note
Sign-in procedures may vary, if your organization uses a specific authentication configuration, such as Single Sign-On (SSO).
Add Member Details
You can also create a privileged user as a member and provide access to the Collaborate's Member Portal.
Steps
To add member details, do the following:
Navigate to Administration > User Management.
Select Privileged Users and click Add. Enter the required details in the User Details tab.
After entering the user details, turn on the Also create this user as Member? toggle to add the user as a member and provide access to the Member Portal. This creates a separate member role for the user and an invitation email is sent to the user's email account, prompting them to sign in to the Member Portal and complete their account setup. By selecting this option, the Recipient Groups and Contact Details tabs become available in the Add Privileged User creation form.
Select the organization type or sector to which the member belongs. For example, Finance.
Select the organization or entity to which the member belongs. For example, Operations Entity.
Use Alert Delivery Options to specify the type of alert notifications you want the user to receive. Available options include Member Portal (Web application), Mobile, and Email Notification. By default, Email Notification is selected. If you only select Email Notification as the alert delivery option, the user is created as an Email-Only user in Collaborate.
Use Member Role to associate one or more roles with the user. Available roles are Member, Intel Approver, Member Admin, Sector Approver, and Sector Admin. For more information about member roles, see Member User Roles.
Use Email Subscription to control email notifications sent to the user. Important email notifications such as invitation emails, OTP emails, and password change updates cannot be unsubscribed. However, you can choose to subscribe or unsubscribe from email notifications from features such as Actions, Alerts, Intel, Collaboration, RFI, and Survey.
Select Active to activate the user. Inactive users cannot sign into Collaborate. By default, the user is activated.
Select Allow Publishing to All Users to allow the user to publish alerts to all other users from the CSAP Analyst Portal. This provides the user publisher permissions.
Select Send Welcome Email to send an invitation email to the user you are adding to Collaborate. The welcome email contains a link to log in to the Collaborate application.
To add additional details such as location and recipient groups for the user, see Add Additional Details
To add contact details and crisis notification details for the user, see Add Contact Details
Click Add.
Two separate email invitations are sent to the user for Analyst Portal and Member Portal. The invitation link expires within 72 hours.
Note
Sign-in procedures may vary, if your organization uses a specific authentication configuration, such as Single Sign-On (SSO).
Add Additional Details
You can include additional details such as location and recipient groups for the user.
Steps
To add additional details, follow these steps:
Go to Administration > User Management.
Select Privileged Users and click Add. Enter the required details in the User Details tab.
After entering the details, turn on the Also create this user as Member? toggle to add the user as a member and provide access to the CSAP Member Portal. This creates a separate member role for the user and an invitation email is sent to the user's email account, prompting them to sign in to Collaborate's Member Portal and complete their account setup. By selecting this option, the Recipient Groups and Contact Details tabs become available in the Add Privileged User creation form.
Select Additional Details to add the location and recipient groups for the member.
Specify the country where the member is located. For example, the United States of America.
Specify the recipient groups to which the member belongs. You can assign Invite Only Groups and System Groups. You can select one or more recipient groups for the member.
Click Add.
Add Contact Details
You can include a physical mailing address and phone number details for crisis notification for the member.
Steps
To add contact details, do the following:
Go to Administration > User Management.
Select Privileged Users and click Add. Enter the required details in the User Details tab.
After entering the details, turn on the Also create this user as Member? toggle to add the user as a member and provide access to the Member Portal. This creates a separate member role for the user and an invitation email is sent to the user's email account, prompting them to sign in to the Member Portal and complete their account setup. By selecting this option, the Recipient Groups and Contact Details tabs become available in the Add Privileged User creation form.
Select Contact Details to add the physical location and crisis notification details for the member.
Enter a physical mailing address for the Member. Entry fields include street, city, state, zip code, and country.
Enter the country code and phone number at which a member can be reached in a crisis. You can enter up to three phone numbers. You can also configure the following additional preferences.
Click Set as Primary to specify which phone number is the primary contact number for the user. You can only specify one number as the primary contact number. Select Receive SMS next to each contact number to specify if a user receives a text message (SMS) in the event of a crisis. By default, this option is not selected.
Click Add.