ACP User Access and Permissions

Question 1

How does Auvik implement role-based access control (RBAC)?

Accepted Answer

Through predefined and custom roles that control what each user can view, configure, and manage

Answer

All users have the same permissions

Answer

RBAC is not available

Answer

Only admin and viewer roles exist

Question 2

What is the principle of least privilege as applied in Auvik?

Accepted Answer

Assign users only the minimum permissions needed to perform their specific job functions

Answer

Give everyone administrator access

Answer

Least privilege means the fewest users possible

Answer

It refers to the cheapest license tier

Question 3

How does multi-factor authentication enhance Auvik security?

Accepted Answer

It requires a second verification factor beyond the password, preventing unauthorized access from compromised credentials

Answer

MFA is unnecessary for cloud platforms

Answer

MFA only protects the billing system

Answer

It slows down login and reduces productivity

Question 4

How should user access be audited in Auvik?

Accepted Answer

Regularly review user accounts, permissions, and access logs to ensure alignment with current roles

Answer

User auditing is not important

Answer

Audit only when a security incident occurs

Answer

Annual review is sufficient

Question 5

What is the process for offboarding a user from Auvik?

Accepted Answer

Promptly disable or delete the account, revoke access, and review any changes made by the user

Answer

Leave the account active indefinitely

Answer

Delete the account after 90 days

Answer

Only change the password

Question 6

How does Auvik handle API authentication?

Accepted Answer

Through API keys or tokens that authenticate programmatic access with associated permission levels

Answer

API access requires no authentication

Answer

APIs use the same login as the web interface

Answer

API authentication is managed by the ISP