Adding users to a group is easy.

If a user is already in the Cyber Crucible user database, they are simply added to another group.

If the user is not already in the Cyber Crucible system, the following will automatically happen:

1. A user account will be created.

2. That user account will be added to the group, as you intended.

3. An invite email is sent to the user, for them to setup their new account. To resend an account invitation, follow the instructions here.

First, go to the Groups page found under the Administration tab in the sidebar.

Then click the Manage Group icon on the group you want to add the user to.

Clicking the icon will popup the Manage Group Modal where you can enter the email of the user you wish to add

The default role is read-only with limited functionality. To change a user’s role, click the desired user, then click the lock icon. This will redirect you to the roles page and automatically filter the data by user and group where you can easily manage their roles inside the group.

Preparation

There are a couple actions you can take before doing a mass reassignment of agents, to make the process go much smoother.

Ensure you have administration permissions to use both the source and destination groups. This can be validated via the Roles page, under Administration.

Next, you will want to ensure you have enough licenses available in the destination group.

The ability to count available licenses easily, is to show the License Usage Count Chart on the Agent Licenses page.

Hovering over a bar will detail the exact number of licenses available and consumed.

Moving Agents

First, select multiple agents that you wish to move. The bulk change group icon will be disabled until agents are selected by clicking on the rows.

Multiple rows are selected by holding down the control key while single clicking on rows.

Then click the bulk change group icon above the grid.

In the modal that pops up, select the destination group. The agents will migrate to the new group.

Changing the group that an agent is in is simple.

First, navigate to the Agents page.

Second, find the Agent you wish to change group membership.

Double click on the Group cell of the row of the agent you wish to change group membership for.

The cell you double clicked on (the first cell in this example) changes to this view:

Select the drop down, and the groups available to move the agent to appears.

If you change your mind, and do not want to change groups - just click on a different row of the grid.

You can also change the group of multiple agents at once on the Agents page by:

First, selecting the agents you wish to change group membership.

Second, clicking the bulk change group icon.

Third, selecting the new group for the agents and clicking the Update button.

User accounts are automatically created when a user is added to a group without previously having an account made. Doing this will automatically send an invitation to the user containing a temporary password to login with.

After initially logging with the temporary password, the user will be able to set the new password for their account. These temporary passwords will expire after a few days if the user has not set their new password.

Now, users have the ability to resend invitations to accounts with a new temporary password.

First, navigate to the Groups page (found under Administration in the sidebar) and click the manage group icon for the group the new account was added to.

Next, a modal will appear with a grid containing the users that are members of the group. Select the user account that needs to be sent a new temporary password to login with and press the Resend Invitation to User icon. An email will automatically be sent to the selected user containing their new temporary password.

Users can create a new group by first navigating to the Groups page found under the Administration tab in the sidebar.

Then, click the Clone a Group icon above the grid.

Clicking this icon will popup a modal where you can choose a group to clone. Note: the current user must be the manager of the group in order to clone.

Note: Fields that are cloned

• Channel Partner Customer

• Organization Name

• Distribution Group

• Source Distribution Group

• SSL Pinning Mode

• Agent Version

• Collect Agent Telemetry Data

• User Password Expiration Policy

• Canary Extension Mode

• Automatically Hide Agents

• Run Agents in Safe Mode

• Proxy Server Config

• DMZ Mode

• Agent Kernel Authenticode

• Agent Module Load Policy

• Module Load Insertion Behavior

Note: Objects that are cloned

• Tailored Behaviors

• Security Notifications

• Silent Responses

• Session Expiration Rules

Users can create a new group by first navigating to the Groups page found under the Administration tab in the sidebar.

Then, click the Create New Group icon above the grid.

Clicking this icon will popup a modal where you can fill out the information for the new group. Note that the user who creates the group will automatically be added to the group as the Admin.

Removing users from a group is easy.

First, go to the Groups page found under the Administration tab in the sidebar.

Then click the Manage Group icon on the group you want to remove the user from.

Clicking the icon will popup the Manage Group Modal where you can select the user you want to remove from the group, and then click the trash icon. Doing so will remove the user from the group and remove any assigned roles the user had in the group.

By default, there are three built-in roles:

• Guest has no permissions.

• Read Only grants read only permissions to tailored behaviors, silent responses, and partner deals.

• Admin gives full read and write access to all portions of the web application.

Creating a Role

Custom roles may be created with granular control.

Find the Create New Role button under the Administration → Roles section of the web application.

After clicking on the Create Role button, enter the Role Name, select the Group to add the Role to, and select the permissions associated with the Role.

Assigning Roles to Users

On the Roles Page, each row on the grid represents a user inside a group and their assigned roles inside that group. To assign a role to a user inside a group, or remove a role from a user, click the toggle inside the column for the desired role.

When a role is assigned to a user, the toggle will be flipped to the right and will look like:

Deleting a Role from a Group

On the Roles Page, each row on the grid represents a user inside a group and their assigned roles inside that group. To delete a role inside a group, find the desired role (represented by a column) for the group you are deleting it from, and click the trash icon inside the cell. Note that default roles cannot be deleted.

Editing a Role’s Permissions

On the Roles Page, each row on the grid represents a user inside a group and their assigned roles inside that group. To edit a role’s permissions for a group, find the desired role (represented by a column) for the group you are editing it for, and click the edit icon inside the cell. This will popup the Edit Role modal and show the current permissions associated with the role, which you are able to change. Note that default roles cannot be edited.