Sections
Applications
The Access Manager applications that authenticate external systems. Create them, view their details, and delete them.
Authorization
Users, roles, groups, and permissions, in an area with its own sidebar.
Security
Your own multi-factor authentication, plus the single sign-on providers and the IP allowlist when your permissions include them.
Products
Turn Lerian products on or off for your tenant.
System
System preferences, such as the interface language and the theme.
What each section needs
Applications, Authorization, and Security need Access Manager. When your account lacks the read permission on applications, the Console hides the Applications entry in the Settings sidebar. It does not show an error. Without the read permission on roles, it also hides the Authorization entry. Security always appears. Its MFA tab is open to every signed-in user. The Single Sign-On tab needs the read permission on providers. The IP allowlist tab needs the read permission on security. Products and System open without Access Manager and without a permission.
Where users live
User, role, group, and permission management lives in a separate area called Authorization, with its own sidebar. Open it from the Authorization entry in the Settings sidebar, or from the gear menu in the top bar.
Managing users
Create, edit, and delete user accounts, reset passwords, and read how groups, roles, and permissions give a user access.