In this article, you will learn how to create a new HEIMDAL Dashboard account and how to assign roles to the created account. The HEIMDAL Dashboard allows you to create Enterprise accounts, Reseller accounts, Distributor accounts, and Visitor accounts.
1. From the HEIMDAL Dashboard homepage, go to the Accounts section and click Create New Account.
2. Fill in the Basic Information fields and the Personal Information fields:
- Insert a login email address;
- Insert the customer's name;
- Select the preferred time zone;
- Choose the preferred currency;
- Select the Dashboard language;
- Select the Dashboard date format;
- Select the Dashboard theme;
- Insert the customer's full name;
- Insert phone number (optional).
3. The enterprise account can be configured to receive Reports and Alerts for the HEIMDAL Security products:
Enabling the Privileged Access Management Alerts will display a dropdown menu with the following settings:
- Manual - the user will receive an email notification for each elevation request when Privileged Access Management is set on Approval via Dashboard;
- Auto - the user will receive an email notification for each elevation request when Privileged Access Management is set on Auto-mode;
- Both - the user will receive email notifications for all elevation requests.
A reseller account will get access to the Partner Reports, where the reporting can be configured for each customer under the reseller customer. To get Partner Reports for one or multiple customers, you need to add the customer(s) to the Partner Reports table using the Add Customer button:
4. Fill in the Miscellaneous Settings:
- Roles: choose the role of the account - distributor (can create distributor/reseller/customer/visitor accounts), reseller (can create reseller/customer/visitor accounts), visitor (cannot create any other accounts), no role selected (can create customer accounts);
- Custom Roles - assign a custom role created on your Enterprise customer account. Custom Roles can be cumulated (this means that if one custom role has a specific claim disabled, and another custom role has the same claim enabled when we are adding both roles to the account, the intended behavior is for the claim to be enabled);
- Account Activated: choose if the account is activated on creation or not;
- Do not require password change on initial login: allows the user to log in without changing the initial password;
- Do not require 2-Factor: disable the 2-Factor Authentication on login;
- Display mode (available only for the Visitor role) - sets a 3-minute refresh rate for the data listed on the page the user is viewing. It does not refresh the entire page but only the data sets listed on the page;
- IP List: add a Public IP, a range of Public IPs, or a list of Public IPs from where the user can log in to the HEIMDAL Dashboard;
The Customize dashboard idle time feature allows users to personalize the maximum period of inactivity (idle time) before the dashboard user is automatically logged out for safety reasons. This setting can be adjusted via a slider found under the Miscellaneous settings section of the account page (default idle time of 15 minutes).
To enable customization, users must first check the box labeled Customize Dashboard idle time. Once enabled, a warning will appear indicating that changing this setting may pose security risks. Users can then adjust the idle time using the slider, selecting a duration between 5 and 120 minutes in 5-minute increments.
Note: if the customization box is unchecked, the idle time reverts to the default setting of 15 minutes. In order for the changes to take effect on an account that is currently logged in, it is necessary for that account to first log out and then log in again.
5. Press Create Account to finish the process. The system will automatically send the account creation e-mails to the newly-created user's email address.
IMPORTANT
An existing HEIMDAL Dashboard account can be duplicated from your user account's settings by clicking the Duplicate User option (the duplicated account needs to be filled in with the Basic & Personal Information of the new user).
Creating a Distributor account: create a new account, fill in all the Basic Information fields, Personal Information fields, and the Miscellaneous Settings (by assigning it the Distributor role). This role can be assigned only from another account with a Distributor role inside the organization.
Creating a Reseller account: create a new account, fill in all the Basic Information fields, Personal Information fields, and Miscellaneous Settings (by assigning it the Reseller role). This role can be assigned by your Distributor or another account with a Reseller role inside your organization.
Creating an Enterprise account: create a new account, fill in all the Basic Information fields, Personal Information fields, and the Miscellaneous Settings (by assigning NO role; the Customer role will be automatically detected when you select the Customer in the Basic Information section). This role can be assigned by your Distributor or Reseller or from another account with a Customer role inside your organization.
Creating a Visitor account: create a new account, fill in all the Basic Information fields, Personal Information fields, and Miscellaneous Settings (by assigning the Visitor role). This role can be assigned by your Distributor or Reseller or from another account with a Customer role inside your organization.
In terms of choosing a password, the requirements are:
- a minimum of 12 characters;
- the use of lower-case and upper-case;
- letters or numbers;
- the use of the following special characters: ! @ # $ %