Home
Vantage
Learn how Vantage uses the power and simplicity of SaaS to deliver unmatched security and visibility across your OT, IoT and IT networks.
Administrator Guide
Information about the Administration section of Vantage, and the tasks that you can do in this part of the software.
Administration
Teams
Groups
The Groups page shows all the user groups in your organization, and lets you create and configure groups.
Propagation settings
The Propagation settings page allows you to propagate a group to sensors, configure remote group permissions, and define scope restrictions. You can also enable single sign-on (SSO) through Vantage, allowing users to authenticate using their Vantage credentials. If SSO is disabled, the group functions as a local group on the sensors.

Vantage
Learn how Vantage uses the power and simplicity of SaaS to deliver unmatched security and visibility across your OT, IoT and IT networks.
- Introduction
  An overview of Vantage.
- Administrator Guide
  Information about the Administration section of Vantage, and the tasks that you can do in this part of the software.
  - Administration
    - Administration page
      The administration page lets a user with administrator privileges configure settings and do other tasks.
    - System
    - Teams
      - Organizations
        The Organizations page shows your organizations, which are logical subdivisions within your Vantage account.
      - Groups
        The Groups page shows all the user groups in your organization, and lets you create and configure groups.
        Roles and permissions
        A list of the default roles and permissions in Vantage.
        Add a group
        The Groups page lets you add a new user group for your organization.
        Assign a role to a group
        Once you have added a new group to Vantage, you need to assign a role, or roles, to the group.
        Propagation settings
        The Propagation settings page allows you to propagate a group to sensors, configure remote group permissions, and define scope restrictions. You can also enable single sign-on (SSO) through Vantage, allowing users to authenticate using their Vantage credentials. If SSO is disabled, the group functions as a local group on the sensors.
        Propagations
        The Propagations page shows which sensors the groups have been propagated to.
        Use Vantage as the IdP for a group
        Learn how you can use Security Assertion Markup Language (SAML) and Vantage as Identity Provider (IdP) to authenticate your sensors.
      - Roles
        The Roles page shows all the assigned user roles in Vantage. It also lets you create new roles, and manage permissions and access levels efficiently.
      - Users
        The Users page shows all the users that have been assigned in Vantage.
      - API keys
    - Organization Settings
  - SAML integration
- User Guide
  Information about the main features of Vantage and the tasks that you can do from the user interface (UI).
- Print format documentation
  A list of all the print-format documentation that is available for Vantage.

Propagation settings

The Propagation settings page allows you to propagate a group to sensors, configure remote group permissions, and define scope restrictions. You can also enable single sign-on (SSO) through Vantage, allowing users to authenticate using their Vantage credentials. If SSO is disabled, the group functions as a local group on the sensors.

Screenshot of the Propagation settings page showing the 'Is admin' option, which grants full administrator privileges to users on connected sensors. — Figure 1. Propagation settings - Is admin

Enable SSO through Vantage for this group

This checkbox lets you enable single sign-on (SSO) and activates the configuration options in the sections below.

Remote group permissions

Is admin

This gives full administrator privileges to the users that are logged into the related sensors.

Note:

When using a Central Management Console (CMC), the scope setting will be ignored, and the group settings will be propagated to every sensor that is attached to the CMC.

Custom sections

Screenshot of the Propagation settings page displaying the 'Custom sections' configuration, which allows administrators to define specific permissions for a group. — Figure 2. Propagation settings - Custom sections

Restrict Scope

The Add Scope dropdown has these options:

Organization
Tag
Site
Sensor

The default setting is for the scope to be set to the current organization.

CAUTION:

If you remove the default setting, so that no scope is selected, the settings will be propagated to every sensor in every organization.