AttackForge Community
AttackForge Enterprise & AttackForge Core
Access Control Matrix
Application User Roles
Function
Administrator
Project Coordinator
Library Moderator
Client / Consultant
Access Global Dashboard
- has full access to this module
Yes
Yes
Yes
Yes
Access Analytics
- can filter analytics
Yes
Yes
Yes
Yes
- can access trend analysis/comparison
Yes
Yes
Yes
Yes
- can personalize analytics
Yes
Yes
Yes
Yes
Access Portfolios
- has full access to this module including CRUD operations
Yes
No
No
No
Access Projects
- can access all projects by default
Yes
No
No
No
- can perform all workflows on a project by default
Yes
No
No
No
- can create new projects
Yes
Yes
No
No
- can update projects
Yes
Yes (for projects user has access to)
No
No
- can archive & unarchive projects
Yes
No
No
No
- can destroy projects
Yes
No
No
No
- can invite users to projects
Yes
Yes (for projects user has access to)
No
No
- can manage user access to projects
Yes
Yes (for projects user has access to)
No
No
- can request new projects & update own project requests
Yes
Yes
Yes
Yes
- can access all pending & actioned project requests
Yes
Yes
No
No
Project Privileges
Function
Administrator
Project Coordinator
Edit
Upload
View
Project
- can view project dashboard
Yes
Yes
Yes
Yes
Yes
- can invite users to project
Yes
Yes
No
No
No
- can view project team and project group members
Yes
Yes
Yes
No
No
- can edit project
Yes
Yes
Yes, only following: start date, end date, set & modify additional email recipients for daily start/stop testing + new vulnerability discovered emails, update custom fields
No
No
- can place project on-hold / off-hold
Yes
Yes
Yes
No
No
- can add custom tags
Yes
Yes
Yes
No
No
- can delete / archive project
Yes
Yes
No
No
No
- can view project logs
Yes
Yes
No
No
No
Scope / Assets
- can view project scope/assets
Yes
Yes
Yes
Yes
Yes
- can create, update & delete scope/assets
Yes
Yes
Yes
No
No
- can see all assets in Assets module (to be able to assign assets/scope to project)
Yes
Yes
Yes
No
No
Testing
- can view test cases
Yes
Yes
Yes
Yes
Yes
- can update test cases, including actioning, adding notes & uploading evidence
Yes
Yes
Yes
No
No
- can assign assets/users to test cases on a project
Yes
Yes
No
No
No
- can lock/unlock/delete test cases on a project
Yes
Yes
No
No
No
- can send daily start / stop testing email notifications
Yes
Yes
Yes
No
No
Last modified 29d ago
Export as PDF
Copy link