Users and Permission for CIS CSAT tool

Problem

Solution

There are 3 types of users in CIS CSAT:

Here are some use case examples;

• Admin user would have access to the full assessment and assessment history of the organization in question, but not of the sub-organizations.  The Admin would be able to create/delete assessments for their organization, and would be able to add/delete users to that organization, not for any of the sub-organizations.

• If you do not want a user to have access to add/delete users, or create/delete assessments in that organization, you could go with a basic user/member, and assign that basic user to all Sub-Controls or a subset of the Sub-Controls.  With the new bulk assignment ability in CIS CSAT v1.3.0 it is easier to assign a large number of Sub-Controls to a single user.