Skip to main content

Create a user in the Veracode Platform

To create a new user in the Veracode Platform, go to the Administration page. You can also create a user by copying an existing one. The account type can be either a user account or an API service account.

If you want to create multiple user accounts in a single bulk operation, use the createuser.do API, as explained in API wrapper examples: Create multiple users.

You can also create a user account or API service account with the Identity APIs.

Create a user

Before you begin:

You must have the Administrator or Team Admin role.

To complete this task:

  1. To open the Admin page, select Admin from the gear icon gear_icon_platform.png.

  2. To begin adding a new user, select Add New User on the Users tab.

  3. In the Login Settings section, enter the required information and select from these optional settings:

    • API Service Account: select the Non-Human User checkbox and enter a username if you want the account type to be an API service account. Leave the checkbox cleared if you want the account type to be a user account (default).

    • Requires MFA: select Yes to require multifactor authentication (MFA) during login. Default is No.

    • Login Enabled: select Yes to enable logins for the user, or No to disable logins. Default is Yes.

    • Restrict Login IP: select Yes and enter a comma-separated list of allowed IP addresses to restrict the IP range for the user login. Default is No.

  4. To configure access permissions, go to the Access Settings section and adjust the following options:

    • Team Memberships: select Select Teams, then select the name of one or more teams to which to add the user. For an API service account, you can select whether to restrict the user to the selected teams. If you select No Team Restrictions, the API service account has access to every application in its organization.

    • User Roles: select the checkbox next to each user role or API role, depending on the account type, to assign to the user. Only the Executive, Greenlight IDE User, Policy Administrator, Security Insights, and Security Lead roles do not require team membership.

    note

    Assigning the eLearning role has special implications.

    • Allowed Scan Types: this field opens depending on which checkbox you select for User Roles. You can select to allow the user to submit all scan types or restrict the user to specific scan types.
  5. If you want to import additional metadata from the application profile, enter a custom metadata value in the Metadata section.

    These metadata fields are visible in the eLearning Account Report. You can use these reports to aggregate eLearning statistics by different values that may be unique to your organization.

  6. To create the user, select Save. Veracode sends new users an email with a one-time activation link to activate their Veracode Platform account. The activation link is valid for seven days.

Copy a user

Create a user by copying an existing user. This action copies the user’s access settings and metadata to the new user.

Before you begin:

  • You must have the Administrator or Team Admin role.

  • You can only copy the following users:

    • Users who don't have the Administrator or Security lead role.
    • If you have the Team Admin role, the user must belong to a team that you manage.
    • If your organization created the user with Just-in-Time (JIT) Provisioning, the JIT configuration must have the User Data Updates option set to Prefer Veracode User Data.

To complete this task:

  1. From the gear icon gear_icon_platform.png, select Admin.
  2. On the Users tab, in the All Users table, locate the user you want to copy.
  3. Select Actions > Copy User. The Add New User page opens.
  4. Enter the first name, last name, and email address for the new user. The remaining settings match those of the user you copied.
  5. Optionally, change any of the settings or accept the copied settings. For details about each field on the Add New User page, see Create a user.
  6. To create the user, select Save.

New users receive an email from Veracode. This email includes a one-time activation link for users to activate their account in the Veracode Platform. The account activation link is valid for seven days.