Administration

Administrator settings contains the platform-wide functions. The entry is only shown to users with Admin permissions, and the views span every company on the platform rather than only your own.

Select Administrator settings from the account menu. The page is titled Administrator Settings and offers five tabs.

Projects

Every project on the platform, regardless of the company it belongs to or the user who owns it.

Column	Content
Name	The project name, linking to the project.
Monitoring	Active or Inactive.
Created on	When the project was created.
Owned by	The owner of the project.
User access	The users who have individual access.
Company access	The company the project belongs to.
Search status	The state of the most recent analysis, for example Done or Running.
Actions	Change project owner, and a control to delete the project.

Changing the owner of a project

1. Select the owner control in the Actions column of the project.
2. Select the new owner in the Change project owner dialogue.
3. Select Save.

This is the correct procedure when an employee leaves and their projects must remain in use.

Users

Every user account on the platform.

Column	Content
User name	The login name.
Full name	The display name.
Email address	The address of the account.
Company	The companies the user belongs to.
Permissions	User or Admin. Selectable directly in the row.
Created on	When the account was created.
Status	Active or Inactive. Selectable directly in the row.
Darknet Anonymization	Active or Inactive. Selectable directly in the row.
Actions	Edit user, Update password, Delete.

Creating a user

1. Select New user.
2. Enter User name, Full name, Email address, and an initial Password.
3. Select Permissions: User or Admin.
4. Select Create.

Managing an account

Task	Procedure
Grant or withdraw administrator permissions	Change Permissions in the row between User and Admin.
Suspend access without deleting the account	Set Status to Inactive. The account and its projects are retained.
Reset a password	Select Update password in the action menu of the row.
Amend the details of an account	Select Edit user in the action menu of the row.
Remove an account permanently	Select Delete in the action menu of the row.

Suspending rather than deleting

Setting Status to Inactive is preferable to deletion when someone leaves: access ends immediately, while ownership and audit history remain intact. Transfer the projects using Change project owner on the Projects tab, and delete the account only once nothing depends on it.

Darknet anonymization

Darknet Anonymization controls whether darknet records are presented to this user in anonymised form. Set it to Active for accounts that need to see the existence and severity of a leak but not the personal data it contains.

Registration Requests

Users who have registered themselves and are awaiting approval.

Column	Content
User name	The requested login name.
Full name	The name given.
Company	The company given.
Email	The address given.
Email status	Verified if the address has been confirmed, otherwise Unverified.
Actions	Accept or Remove.

1. Check the Company and the Email against the organisation the request claims to belong to.
2. Select Accept to create the account, or Remove to reject the request.

Assessing a request

Treat Email status as a necessary but not sufficient check: a verified address proves only that the mailbox exists. Approve a request when the address belongs to the domain of the stated company, and confirm the request out of band where it does not.

Companies

Every company on the platform.

Column	Content
Company name	The name of the company.
Manager	The managers of the company.
Address	The company address.
Users	The members of the company.
Projects	The projects of the company, each linking to the project.
Plans	The plans assigned to the company.
VAT	The VAT identification number.
Actions	Edit company, Delete.

Creating a company

1. Select New company.
2. Enter Company name, Company address, ZIP code, City, and Country. Optionally enter the VAT Registration number.
3. Select Create.

Then assign a plan and invite the first manager, who can maintain the company from the Companies view thereafter.

Configuring the external Darknet API

When the Omniac Darknet integration is enabled, the company editor includes an External API tab. The key entered here enables that company to access data from the external Omniac Darknet API.

To add an API key:

1. In the Companies table, select Edit company.
2. Open External API.
3. Enter the API key.
4. Select Save.

After it has been saved, the key is masked and cannot be edited in place. To replace it, select Delete API key, enter the replacement, and select Save. To remove the integration without adding a replacement, delete the key, leave the field empty, and save the company.

Deployment-specific feature

The External API tab is not shown when the Omniac Darknet integration is disabled.

Template Plans

A template plan defines a quota that can be assigned to companies, so that the same commercial package does not have to be configured repeatedly.

Column	Content
Name	The name of the template plan.
Monitoring limits	The configured monitoring quota per category.
Search limits	The configured search quota per category.
Actions	Edit template plan, Delete.

Creating a template plan

1. Select New template plan.
2. Enter a Name.
3. Under Search, activate each category the plan is to include: Enable keyword search, Enable IPv4 search, Enable IPv6 search, Enable domain search, Enable darknet search, Enable employee lookup search.
4. Under Monitoring, activate the recurring counterparts: Enable keyword monitoring, Enable IPv4 monitoring, Enable IPv6 monitoring, Enable domain monitoring, Enable darknet monitoring, Enable employee lookup monitoring.
5. For each activated category, enter the Limits and select a Reset interval.
6. Select Create.

Setting	Values
Limits	The maximum consumption for the category. Enter -1 for no limit.
Reset interval	Never, One day, 7 days, 30 days, Six months, One year.

Search and monitoring categories are activated independently. For example, enabling employee lookup search does not automatically enable employee lookup monitoring. A category that is not activated in either group is unavailable for that kind of processing, which is the mechanism for providing attack-surface analysis without darknet or employee data.

Limits and reset intervals interact

A limit with the reset interval Never is a lifetime allowance for the plan; the same limit with One day is a daily rate. Setting a low limit with Never on a monitoring category will silently stop the recurring analysis once the allowance is consumed, so prefer a reset interval for anything that recurs.