Users and roles
Admins run scans and act on findings. Viewers can read everything and join the conversation.
| Action | Admin | Viewer |
|---|---|---|
| See assets, scans and findings | Yes | Yes |
| Download reports and exports | Yes | Yes |
| Comment, ask @Zaaf, keep private notes | Yes | Yes |
| Add assets, test accounts and GitHub access | Yes | No |
| Change intensity, limits and schedules | Yes | No |
| Start and cancel scans | Yes | No |
| Mark as fixed, request retest, accept the risk | Yes | No |
| Manage integrations | Yes | No |
Adding and removing people
Zaaf manages the people in your organization. To invite someone, change a role, suspend an account or change an email address, write to your Zaaf contact. New people receive an invitation email that is valid for 7 days.
Alert email
Each organization has one alert address, such as security@yourcompany.com, that receives an email whenever a finding is published. Ask Zaaf to change it. For channel or tool notifications, use integrations.