4.2 Role-Based Access Control

4.2.1 Groups Module Overview#

The Groups module (see Section 2.12) enables role-based access control (RBAC) through user group management, allowing administrators to organize users into logical groups and assign permissions to resources such as honeypots, alarms, and reports.

4.2.2 Group Card Structure#

Each group is displayed as a card containing the following properties (see Section 2.12.2.1):

Property	Description
Group Avatar	Visual icon identifier for the group
Group Name	Identifier for the group
Group Members	Header with hint text: "Click to photo for list or delete users in group."
Member Count	Number of members with icon
Description	Purpose or scope statement
Created By	Administrator who created the group
Created Date	Date when the group was established

4.2.3 Creating a New Group#

Click the Create A New Group button to open the group creation form (see Section 2.12.6.2). Configure the following parameters:

Parameter	Description
Name	A unique identifier for the group
Upload Group Image	Optional visual avatar/icon for the group card
Description	A brief explanation of the group's purpose or scope

The summary panel above the button displays current system totals including Total Groups and Total User counts.

4.2.4 Editing and Deleting Groups#

Each group card includes action icons (see Section 2.12.2.2):

Action	Function
Edit	Modify group name, description, or group picture (see Section 2.12.3)
Delete	Permanently remove the group and its associations (see Section 2.12.4)

Warning: Deleting a group permanently removes all group associations and member assignments. This action cannot be undone.

4.2.5 VGN Access Control#

The Access tab within the VGN module (see Section 2.7.3) manages user authentication and authorization through LDAP server integration and local user accounts. Authorized groups are configured per VGN chain in the Authorized Groups section (see Section 2.7.2.5). The groups table displays Name, Type (local or LDAP), LDAP Server, MFA Policy, and an action to remove the group from authorization.

Click Add Group to authorize a new group for a VGN chain with the following parameters:

Parameter	Description
Group Type	Select local or LDAP
Group Name	Select a group from the available list
MFA Policy	Choose Bypass MFA or select a specific policy number