ACP User Access and Permissions — Questions and Answers
Question 1: How does Auvik implement role-based access control (RBAC)?
- All users have the same permissions
- Through predefined and custom roles that control what each user can view, configure, and manage (Correct answer)
- RBAC is not available
- Only admin and viewer roles exist
Correct answer: Through predefined and custom roles that control what each user can view, configure, and manage
Auvik implements RBAC through configurable roles that granularly control user permissions for viewing, configuring, and managing different aspects of the platform.
Question 2: What is the principle of least privilege as applied in Auvik?
- Give everyone administrator access
- Assign users only the minimum permissions needed to perform their specific job functions (Correct answer)
- Least privilege means the fewest users possible
- It refers to the cheapest license tier
Correct answer: Assign users only the minimum permissions needed to perform their specific job functions
The principle of least privilege ensures each user has only the permissions necessary for their role, reducing the risk of unauthorized changes or data exposure.
Question 3: How does multi-factor authentication enhance Auvik security?
- MFA is unnecessary for cloud platforms
- It requires a second verification factor beyond the password, preventing unauthorized access from compromised credentials (Correct answer)
- MFA only protects the billing system
- It slows down login and reduces productivity
Correct answer: It requires a second verification factor beyond the password, preventing unauthorized access from compromised credentials
MFA adds a critical security layer by requiring a second verification factor, protecting accounts even if passwords are compromised.
Question 4: How should user access be audited in Auvik?
- User auditing is not important
- Regularly review user accounts, permissions, and access logs to ensure alignment with current roles (Correct answer)
- Audit only when a security incident occurs
- Annual review is sufficient
Correct answer: Regularly review user accounts, permissions, and access logs to ensure alignment with current roles
Regular access audits ensure user accounts and permissions remain aligned with current roles and that no unauthorized access exists.
Question 5: What is the process for offboarding a user from Auvik?
- Leave the account active indefinitely
- Promptly disable or delete the account, revoke access, and review any changes made by the user (Correct answer)
- Delete the account after 90 days
- Only change the password
Correct answer: Promptly disable or delete the account, revoke access, and review any changes made by the user
Proper offboarding requires prompt account deactivation, access revocation, and review of recent changes to ensure security continuity.
Question 6: How does Auvik handle API authentication?
- API access requires no authentication
- Through API keys or tokens that authenticate programmatic access with associated permission levels (Correct answer)
- APIs use the same login as the web interface
- API authentication is managed by the ISP
Correct answer: Through API keys or tokens that authenticate programmatic access with associated permission levels
Auvik API access is authenticated through API keys or tokens, each with defined permission levels that control what data and actions are accessible.
ACP User Access and Permissions
How does Auvik implement role-based access control (RBAC)?