NeXpose - Managing And Creating Users

Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
or

Already have an account? Sign In »

Time
24 minutes
Difficulty
Beginner
Video Transcription
00:01
>> In this Nexpose tutorial,
00:01
I'll be walking you through managing
00:01
and creating user accounts.
00:01
Many companies have security groups
00:01
whose responsibilities are passed
00:01
>> into manageable subsidiaries or divisions.
00:01
>> These divisions may have
00:01
their own security subgroups or sites within Nexpose.
00:01
Nexpose is role-based access controls
00:01
>> a lot of global administrators to create other uses
00:01
>> and limit their access to these sites
00:01
>> or groups in which they belong.
00:01
To create a user, we're going to go
00:01
to the administration tab,
00:01
and right along the top, you'll see
00:01
uses and just click on Create.
00:01
This will bring you to the new user configuration.
00:01
Everything here is pretty straightforward
00:01
and just as you would expect,
00:01
just give the user name.
00:01
Authentication methods next,
00:01
>> if you have set up external authentication methods
00:01
>> such as LDAP or Kerberos,
00:01
>> there'll be listed here in this drop-down.
00:01
Otherwise next bullets user
00:01
>> is just a default local account built into Nexpose.
00:01
>> Next described in all the fields in red are acquired.
00:01
Make sure you fill those in
00:01
>> and we'll give you a password.
00:01
>> Later on, you can always enable
00:01
>> or disable an account by editing it.
00:01
>> Once you've got all the setup,
00:01
guide and click on "Next".
00:01
Here you will select the roles
00:01
and permissions for the user.
00:01
Nexpose comes with five built-in roles,
00:01
ranging from global administrating
00:01
who has access to everything
00:01
>> all the way down to a user
00:01
>> who only has few access to any sites
00:01
>> and asset groups that they're assigned to.
00:01
If none of the built-in roles fit
00:01
>> what you're looking for,
00:01
>> you can always choose custom,
00:01
select your own permissions for the user.
00:01
Can click on "Next", and this is
00:01
what we want this user to have access to.
00:01
You can give them access to all sites,
00:01
or you can create a custom list of sites
00:01
>> that you want them to have access.
00:01
>> Let's click on "Save".
00:01
Next, we'll just do the same thing with
00:01
any asset groups that we want to give them.
00:01
Once you've done this, go ahead
00:01
>> and click on "Next",
00:01
>> and now your user has been created.
00:01
Clicking on "Manage" will give you
00:01
a listing of all users.
00:01
Hey, you can edit any one that you'd
00:01
like or delete them.
00:01
If trying deleting a user that
00:01
has reports assigned to them,
00:01
Nexpose allows you
00:01
>> to easily reassign these items to another user.
00:01
>> Next, I'm going to log out
00:01
>> and log back in as a user I just created.
00:01
>> As you can see right away,
00:01
there is no administration tab
00:01
>> since this is a custom user
00:01
>> and I just gave them access to these two sites,
00:01
>> as well as this one asset group.
00:01
This user still has access to click around
00:01
and view all the information
00:01
>> on all the devices within the site.
00:01
>> That's about it for creating uses.
00:01
If you have any questions, you can go ahead
00:01
>> and click on the support link
00:01
>> in the upper right-hand corner.
Up Next