Managing members in Invicti Enterprise

Invicti Enterprise allows you to add and manage members with a range of secure permissions that enable access control. You also have the ability to assign them to Direct Roles, Website Groups, and Teams.

• Invicti Enterprise helps you to safeguard your web application against malicious attacks by providing you with secure options when adding members to your team.
• You can add developers, analysts, executives, and others as members to ensure that everyone who is involved in securing the web application can coordinate and perform their roles safely.
• While adding new members, you can grant them different permissions. You can assign them to the existing Direct Roles, Website Groups, and Teams.
• Alternatively, you can create a unique role so that a single member with only one, unique task to perform has the correct access. For example, you can give a member permission only to start a scan. Or, you can add executives with permissions only to view reports or progress (to save them from having to request the information from others).

This topic explains how to add, edit, and delete member(s). For further information, see Managing Teams in Invicti Enterprise and Managing Roles in Invicti Enterprise.

Adding your users and/or user groups with SCIM 2.0? You can if you have an Azure AD or Okta account. For further information, see Configuring Azure Active Directory Integration with SCIM and Configuring Okta Integration with SCIM.

How to add a new member in Invicti Enterprise

1. Log in to Invicti Enterprise.
2. From the main menu, select Team > New Member Invitation.

3. In the Name field, enter the person’s full name.
4. In the Email field, enter the person’s email address.
5. In the SSO Email field, enter the person’s SSO email address. (This is displayed only if you enabled the Use Alternate Login Email in the Single Sign-On settings.)
6. From the Phone Number field’s country flag drop-down, select the relevant country and enter the person’s telephone number.
7. In the Allowed Website Limit, move the slider left or right to set the maximum number of websites a member can add.
8. In the Direct Roles section, select Assign Role, if necessary.

• In the Roles and Website Groups list, select the checkboxes as required to assign roles and website groups to the new member, and select Assign Role.

9. In the Teams section, select Assign Team, if necessary. 

• In the Teams dialog, select the checkbox(es) as required to assign a team to the new member, then Assign to Team.

10. Enable API Access to grant members permission to access the API settings, if required.
11. Select the Provision new member with SSO checkbox, if necessary. (For further information about the provisioning, see Provisioning a Member.)
12. Select Send Invitation.

You can add a new member without specifying a Direct Role, Team, and Website Groups.
If you assign members to a team, they inherit its current permissions, even if you did not select any roles.

Provisioning a member

Invicti lets you provision a member from the New Team Member window. When you enable the Provision new member with the SSO checkbox, a new member will be able to log in to Invicti Enterprise directly. Member(s) will receive an email, saying they can log in to their accounts without setting a password.

You can also enable this SSO login via your identity provider. While configuring attribute statements, you can add an attribute as OnlySsoLogin, so these users can log in to Invicti Enterprise via SSO. For further information, see Configuring SAML-Based Single Sign-On Integration.

Please note that you need to configure the Single Sign-On before adding members with SSO. For further information, see Single Sign-On Settings and Single Sign-On Providers.

How to provision a new team member

1. From the main menu, select Team > New Team Member.
2. Complete the remainder of the fields, as described in How to Add a Team Member.
3. Select the Provision New Member with the SSO checkbox.
4. Select Provision.

Please note that users that were provisioned cannot be an account administrator and change their password.

How to view and resend a new member invitation in Invicti Enterprise

1. From the main menu, select Team > Invitations.
2. Next to the relevant person, select Email. 
3. In the confirmation dialog, select Yes, send it.

How to delete a new member invitation in Invicti Enterprise

1. From the main menu, select Team > Invitations.
2. Next to the relevant person, select the Delete icon ().
3. In the confirmation dialog, select Delete.

How to edit a member in Invicti Enterprise

1. From the main menu, select Team > Manage Members.
2. Next to the relevant person, select the Edit icon (). Make the required changes to the member’s contact details, credentials, roles, or teams.
3. Select Save.

To edit and/or delete members, they have to complete the registration steps. Otherwise, you cannot edit and/or delete them via the Update Member page.

How to delete a member in Invicti Enterprise

1. From the main menu, select Team > Manage Members.
2. Next to the relevant person, select the Delete icon ().
3. In the confirmation dialog, select Delete.

Filtering team members

Column Filters

All columns can be filtered, using a highly customizable combination of Fields, Operators, and Values. Each is explained below. This is useful to manage your team members.

Filters & Values

This table lists the filters and values available for the columns listed above. Select an option to filter the list by that criterion.

• In many cases, values can be entered into the value field; in others, the value can be selected from a drop-down menu.
• You can enter more than one filter at a time.

Operator

This table lists and explains the Operators available for filtering columns. They work in conjunction with the Field, Operator, and Value.

How to filter team members in Invicti Enterprise

1. From the main menu, select Team > Manage Members.
2. From the Members page, select the filter button () next to any header column.
3. Select Clear to clear all fields.
4. Add a New Filter.
5. In the relevant filter, where relevant:

• From the Field drop-down, select Tag.
• From the Operator drop-down, select an option.
• In the Value field, enter a value.

6. Select Apply.