User Accounts (Foundation Services release) | Trend Micro Service Central

Views:

Create and manage accounts for authorized users to access the Trend Vision One console.

Note

Only customers that have updated to the Foundation Services release have access to the feature.

User accounts allow you to control access to the Trend Vision One console by managing accounts for authorized users. Control or limit which screens and apps each account can access by assigning User Roles to your accounts.

Note

Only user accounts with the role permission Configure account settings can add, modify, or delete other user accounts.

The following information is relevant for users that have updated to the Foundation Services release of Trend Vision One.

SAML connections are recreated in Trend Vision One for users that updated from the following:
- Apex One as a Service
- Cloud One - Endpoint & Workload Security
Existing Cloud One SAML users with email address-based identifiers who have logged into Cloud One within the last month can start using Trend Vision One Endpoint Security after verifying their Trend Vision One SAML log in email address.

The following table outlines the actions available in the User Accounts screen (Administration → User Accounts).

Action	Description
Add an account	Click Add User Account to create a new user account. For more information, see Configuring accounts.
Edit an account	Click an Account to modify account details such as role and description. For more information, see Configuring accounts.
Delete accounts	Select one or more accounts and click Delete to remove the selected accounts.
Enable or disable multi-factor authentication (MFA)	Click Multi-factor authentication and click the toggle to enable or disable MFA. Once MFA is enabled and properly configured, a verification code will be needed in the following scenarios: Local accounts sign in to Trend Vision One All accounts perform specified operations in Trend Vision One For more information, see Enabling and configuring multi-factor authentication.
Enable or disable an account	Click the toggle in the Status column to enable or disable the account.

The following table outlines the different User Account types.

Account Type	Description
SAML Account	Allows you to invite individual SAML users to sign in to the Trend Vision One console using your corporate identity provider solution.
SAML Group Account	Allows you to invite multiple users in an assigned distribution list to sign in to the Trend Vision One console using your corporate identity provider (IdP) solution. Adding SAML Group Account users requires group information synchronization with your IdP, and users must verify their email addresses before they can sign in to Trend Vision One.
IdP-Only SAML Group Account	Allows you to add multiple users in an assigned group to sign in to the Trend Vision One console using your corporate identity provider (IdP) solution. An IdP-Only SAML Group Account is a specialized group account utilized in Trend Vision One that only requires your configured IdP to share the SAML group attribution with Trend Vision One, which only allows users assigned with the group attribution to access the Trend Vision One platform based on the configured group's role settings. Because the IdP-Only SAML Group Account does not require sharing or synchronizing other data related to the configured user list, Trend Vision One might not have access to individual user information, and cannot send email notifications to users within the IdP-Only SAML Group Account. For more information, see Adding an IdP-Only SAML Group Account.
Local Account	Allows you to invite users to sign in to the Trend Vision One console with their email address and password.