VERISCO Alertio Administer
Users and roles
The three roles, exactly what each one can do, and how administrators manage accounts. Permissions are enforced in the console and again on the server.
Open Accounts in the Administration group. It is visible to administrators only.
The three roles#
| Role | Description |
|---|---|
| Administrator | Full access: users, settings, integrations, agents, playbooks and response scripts. |
| Analyst | Investigates alerts and incidents, and runs response actions. Cannot manage users or settings. |
| Read-only | Views dashboards, alerts and incidents. Cannot make changes. |
Every permission is enforced twice: the console hides what a role cannot use, and the server refuses it independently. An action unavailable to your role cannot be reached by any route.
What each role can do#
| Capability | Administrator | Analyst | Read-only |
|---|---|---|---|
| View the Command Center, alerts and incidents | Yes | Yes | Yes |
| Change an alert's triage status | Yes | Yes | — |
| Acknowledge and close incidents | Yes | Yes | — |
| Investigate endpoints and file integrity | Yes | Yes | View |
| Run AI analysis | Yes | Yes | — |
| Look up threat intelligence | Yes | Yes | View |
| Run medium and high-risk response actions | Yes | Yes | — |
| Run destructive response actions (isolate, kill process, quarantine) | Yes | — | — |
| Run playbooks | Yes | Standard ones | — |
| Create and edit playbooks | Yes | — | — |
| Write and deploy response scripts | Yes | — | — |
| Enrol agents and issue enrolment tokens | Yes | — | — |
| Change the file integrity policy | Yes | — | — |
| Tune scoring: weights, criticality, schedules, trust rules | Yes | — | — |
| Configure integrations | Yes | — | — |
| Manage accounts, view the audit record | Yes | — | — |
A playbook that contains a destructive action needs an administrator, whoever starts it.
Managing accounts#
The Users tab lists every account. Filter by role, or search by name or email. Export CSV downloads the list.
| Action | What it does |
|---|---|
| Add user | Creates an account with username, full name, email, phone, department and role. |
| Change role | Moves the user to another role. |
| Edit details | Changes name, email, phone or department. |
| Reset password | Issues a new password. There is no reset by email. |
| Disable and Enable | Suspends or restores access without deleting the account. |
| Remove | Deletes the account. |
The last administrator is protected
The last remaining administrator cannot be removed, disabled or demoted. The attempt is refused with an explanation, so the platform can never be left without someone able to manage it.
Roles and Audit tabs#
Roles shows the permission matrix for the three roles. Audit records account and configuration changes, each attributed to a person and marked informational, warning or critical. Filter by actor, action or severity, and export the result.
Your own account#
Everyone can open their profile from the top bar to see their details, change their password, and sign out. See The workspace.
Something missing or wrong on this page? Tell us and we will fix it.