Create a Managed/Managed-Plus user

Supported in:

The managed and managed-plus users are offerings for MSSP end customers and as such are a hybrid between a collaborator and a full user.

The managed user is useful for an MSSP who wants to run a hybrid SOC together with their end customers.

The managed user will have full case management capabilities on their own environment (similar to the MSSP analyst).

The managed-plus user is the same as a managed user but with the ability to build and edit playbooks in their own environment.
They will be able to view playbooks running in their environment such as "All environments" playbooks - but will not be able to edit playbooks if they don't have permissions to all the environments that the Playbook is associated with.

So for example, a user with permissions to the environment "North England" only - will be able to view but not edit a playbook that is running on "North England", "South England" and "East England." environments. Moreover, this user will not see that this Playbook is running on "South England" and "East England" environments.

The MSSP is responsible for managing the Google Security Operations Marketplace, configuring the integrations and agents and customizing actions in the IDE for the Managed-plus user.

The procedure to add a new managed/managed-plus user is the same as that of adding other types of users.

Step One: Purchase the license for the required number of users with your Account Manager.
Step Two: Use the predefined managed user/managed-plus permission groups, or create a new one.
Step Three: Create new user.

Purchase managed user/managed-plus user license

  1. Arrange a license for the required number of Managed Users/ Managed-Plus users.
  2. Navigate to Settings > Organizations > License Management to view the details.
    licensedetails

Set up a permission group

  1. Navigate to Settings > Organization > Permissions.
  2. Click on the predefined Permissions group called Managed User/Managed-Plus User or create a new one.
  3. Select the required categories that you want to be accessible. Note that the Playbooks module is not available for the Managed User.
    manageduserpermissions
  4. Select the Landing Page from the drop-down list.
  5. Click Save on the top right of the screen.

Create a managed/managed-plus user

  1. Navigate to Settings > Organization > User Management.
  2. Click in the top right of the screen and the Add User dialog box opens.
  3. In the License Type field, make sure to select the Managed or Managed-Plus type.
  4. In the Permission Group drop-down, make sure to select the Managed/ Managed-Plus User group or any new group that you created.
    addmanageduser
  5. Fill out the rest of the fields as required.
  6. Click Add. An email invitation is sent automatically to the user. Their status remains "Pending" until they accept the invitation to join Google Security Operations SOAR and create a password.