Creating Additional User Accounts

In ArcSight, the Tenant Administrator can create additional user accounts, then assign them roles and groups. The email ID specified for each user becomes their login username.

1. Log in to ArcSight with your ArcSight Tenant Administrator account.

   For example, https://<your_tenant_name>.mp.cyberresprod.com

2. Select ADMIN > Account Groups > Create User.

   For more information about creating users; assigning roles; and using the Default Roles, see the User's Guide for ArcSight SIEM as Service or click Help.

3. Inform users that you created their accounts so they can log in to ArcSight.

4. After the user logs in and navigates to SOAR for the first time, revoke the Super User role.

   This is a one time configuration and once the Super User role is revoked, the new user is automatically assigned to the Empty Role.

5. Repeat the steps above to create additional users, assign roles, set up credentials, and use ArcSight.

6. If Real-time Threat Detection is part of the ArcSight environment, reconcile users with Fusion User Management.