Inviting new users in MDR Web Console

Expand all | Collapse all

To invite a new user to Kaspersky Managed Detection and Response:

1. In the MDR Web Console window, navigate to the Settings menu item.

   The user list opens.

2. Click the Add button located above the user list.

   The invitation card appears.

3. In the Email field, specify an email address.
4. In the User role field, specify a role for the new user.

   The following user roles are available:

   • MDR Administrator

     The superuser who has access to all Kaspersky Managed Detection and Response functions granted by the license. The MDR Administrator can grant access to client data sources to other users. When you activate Kaspersky Managed Detection and Response, you become the MDR Administrator automatically, which is why we recommend using a corporate email address for the activation process instead of a personal email address. Having the MDR Administrator created with a personal email address can pose security risks, such as theft of the MDR Administrator account.

     In Kaspersky Security Center, this role corresponds to the following access rights:

     Functional area	Allow	Deny
     Incident access
     Auto-accept settings
     Response management
     Tenant management
     Incident summary scheduling
     REST API access

     Only a user with the MDR Administrator role assigned can assign the MDR Administrator role to a new user.

   • Senior Security Officer

     An employee who has access to the Kaspersky Managed Detection and Response functions granted by the license, but who does not have access to the REST API. The Senior Security Officer has the right to accept and reject responses.

     Incident response is a structured methodology for handling security incidents, breaches, and cyberthreats.

     In Kaspersky Security Center, this role corresponds to the following access rights:

     Functional area	Allow	Deny
     Incident access
     Auto-accept settings
     Response management
     Tenant management
     Incident summary scheduling
     REST API access

   • Security Officer

     An employee who has access to the Kaspersky Managed Detection and Response functions granted by the license, but who does not have access to the REST API. The Security Officer cannot accept and reject responses.

     In Kaspersky Security Center, this role corresponds to the following access rights:

     Functional area	Allow	Deny
     Incident access
     Auto-accept settings
     Response management
     Tenant management
     Incident summary scheduling
     REST API access

5. If necessary, select the value (or values) in the Tenant drop-down list.

   Tenants that already exist in Console and have the Root without tenants value are suggested.

   The user can view only the assets and incidents related to the specified tenants. If you have assets and incidents not assigned to any tenants, the user can view them if you select the Root without tenants value.

   You can select the Root without tenants value, in addition to specifying tenant names.

6. Click Invite.

   The invitation card disappears.

A message with the invitation link is sent from noreply@mail.account.uis.kaspersky.com to the specified email address.

The invited user must verify his or her email address by following the link from the message. The user cannot log in and use Kaspersky Managed Detection and Response until their email is verified. Permissions corresponding to the user role will be granted after the first login of the user.