This document provides an overview of the user management system in Mixeway Flow, detailing the onboarding process, user roles, and the operations available within the User Management panel. Understanding these components is essential for administrators and users alike to navigate the system effectively.

User Onboarding

In Mixeway Flow, users can be onboarded in two primary ways:

1. Administrator Onboarding: An administrator can manually create user accounts within the system.
2. SSO System Integration: If a user is successfully authenticated through a Single Sign-On (SSO) system and does not already exist in Flow, an automatic user account is created. In this scenario, the user is assigned the default role of “User.”

User Roles

Mixeway Flow features three distinct user roles, each designed for specific functions within the platform:

1. User:
   • This role allows users to register repositories and teams, browse vulnerabilities, and suppress them.
   • It is primarily intended for developers who need access to these functionalities.

2. Team Manager:
   • Team Managers can register repositories, create new teams, assign users to the teams they manage, and browse or suppress vulnerabilities.
   • This role is tailored for security champions, tech leads, or product owners who oversee team activities.

3. Administrator:
   • Administrators have full access to all functionalities across the platform, including managing settings and performing operations on all objects.
   • This role is crucial for maintaining the overall system and user management.

User Management Operations

The User Management panel in Mixeway Flow allows administrators to perform several key operations:

• Create User: Administrators can create new user accounts.
• Change User Password: If the authentication mode is set to user/password, administrators can change a user’s password.
• Change User Teams: Administrators can modify the teams to which a user belongs.
• Activate/Deactivate Access: Administrators can enable or disable user access to the system as needed.

By understanding these roles and operations, users and administrators can effectively manage user accounts and ensure a smooth workflow within Mixeway Flow.