Default roles

Invicti is a multi-user system that utilizes role-based access control (RBAC) to effectively manage user permissions. This allows you to control and restrict access by assigning specific roles to users based on their responsibilities.

The first account created is the Owner, who has the authority to add new users, assign roles, and configure which scan targets can be accessed for scanning or reporting. For more information about adding users and configuring custom roles, refer to Edit, delete, or disable users and Create and manage roles documents.

This document provides an overview of default roles in Invicti Platform.

Default roles

A role is a set of permissions that administrators assign to users or user groups. When adding a new user, you must select an appropriate role. The Invicti Platform offers five default roles.

The table below outlines the default roles and their respective responsibilities.

Each permission exists as:        

• ✅Full        
• ✔️View only
• ☑️Root Organization Only        

* Permissions are affected by Collections (if restricted)