Explore updated user roles in Autobahn
Which roles does your organization use?
This article covers the updated roles, which newer organizations use: Admin, Global Contributor and Individual Contributor. Some organizations still use the Owner, Admin and General User roles. To check, open Team and look at the role names. If you see Owner or General User, read Explore the user roles in Autobahn instead.
Different roles in Autobahn
Autobahn offers three user roles. They differ in what each role can act on: the whole organization and how it is configured, all of the organization’s content, or only the work assigned to you.
- Admin: manages the whole organization, including how it is configured.
- Global Contributor: works on all of the organization’s content, but does not manage organization settings.
- Individual Contributor: works on the issues, assets and workouts assigned to them.
Admin
The Admin has the highest level of access. Changes an Admin makes apply to the whole organization and affect every other user. An organization can have multiple Admins.
An Admin can:
- Add, remove, promote, demote, deactivate and reactivate users
- View and download the organization dashboard, and create custom dashboards
- Work on all issues, assets and workouts: view, mark, download, assign and tag
- Upload and delete assets
- Create, upload, view, edit, assign, tag, hide, download and delete scans
- Configure, edit and delete integrations
- Submit and approve requests
- View and edit every organization setting, including organization details, subscription, Issue Review configuration, asset and issue rules, asset assignment rules, basic user feature flags, ticketing email and scan notifications
Note: Only the user who created a custom dashboard can edit, share or delete it. This applies to Admins too.
Global Contributor
A Global Contributor can do everything an Admin can do, except manage organization settings. This role suits team leads and security engineers who run the security program day to day but should not change how the organization is configured.
A Global Contributor can:
- Add, remove, promote, demote, deactivate and reactivate users
- View and download the organization dashboard, and create custom dashboards
- Work on all issues, assets and workouts: view, mark, download, assign and tag
- Upload and delete assets
- Create, upload, view, edit, assign, tag, hide, download and delete scans
- Configure, edit and delete integrations
- Submit and approve requests
- View and edit scan notifications
A Global Contributor cannot:
- View organization settings or subscription details
- Edit the Issue Review configuration, asset and issue rules, asset assignment rules, basic user feature flags or ticketing email. They can view these settings but not change them.
Individual Contributor
The Individual Contributor role is for remediation work. Individual Contributors see only the issues, assets and workouts assigned to them.
An Individual Contributor can:
- View, mark and download their assigned issues, assets and workouts
- Edit workouts and give feedback on them
- View and submit requests
- Send workouts to ticketing systems such as Jira
- Manage their personal settings, Issue Review notifications and periodic summaries
If the Admin allows it in basic user feature flags, an Individual Contributor can also assign and tag issues and assets, and approve requests.
An Individual Contributor cannot:
- View the organization dashboard or the organization’s Hackability Score
- Run scans, or upload or delete assets
- Manage integrations
- Invite or manage team members
- View organization-level settings
Roles at a glance
| Area | Admin | Global Contributor |
Individual Contributor |
|---|---|---|---|
| Organization dashboard | Yes | Yes | No |
| Own custom dashboards | Yes | Yes | No |
| Issues, assets, workouts | All | All | Assigned |
| Assign and tag issues and assets | Yes | Yes | If enabled |
| Upload and delete assets | Yes | Yes | No |
| Scans | Yes | Yes | No |
| Integrations | Yes | Yes | No |
| Requests: view and submit | Yes | Yes | Yes |
| Requests: approve | Yes | Yes | If enabled |
| Team management | Yes | Yes | No |
| Scan notifications | View & edit | View & edit | No |
| Issue Review configuration, asset and issue rules, assignment rules, basic user feature flags, ticketing email |
View & edit | View only | No |
| Organization settings and subscription | View & edit | No | No |
| Personal settings, Issue Review notifications, periodic summaries | Yes | Yes | Yes |
“Assigned” means the user sees only items assigned to them. “If enabled” means the Admin turns it on in basic user feature flags.
Assigning or changing a role
Admins and Global Contributors can invite users and change their roles from the Team page.
- Go to Team.
- Invite a new user, or open an existing user.
- Choose Admin, Global Contributor or Individual Contributor.
When a user is deactivated, their shared dashboards and assignments transfer to the person who deactivated them.
What happens to existing users
When your organization moves to the updated roles, every user is moved to a new role automatically. No one loses access in the move.
| Previous role | New role | What changes for the user |
|---|---|---|
| Owner | Admin | Keeps full access to the organization. Can now also tag and delete scans, delete integrations and reactivate users. |
| Admin | Admin | Gains access to organization settings and the subscription, including the Issue Review configuration and basic user feature flags. Can now also demote, deactivate and remove other Admins, and gains the same new scan, integration and team abilities. |
| General User | Individual Contributor | Can now download assigned issues and assets, edit workouts and give feedback on them. |
No one is moved to the Global Contributor role automatically. After the switch, an Admin can assign it from the Team page to members who should work on all of the organization’s content but not manage its settings.
We are moving organizations to the updated roles gradually. Your account team will let you know before your organization switches.