Home
Administration Guide
Administration, configuration, and management tasks needed for the optimal use of Seeker
User Administration
Introduces the Seeker role-based access control (RBAC) concept, and outlines the user administration tasks.
Manage Groups
To manage user permissions, create and manage user groups.

Administration Guide
Administration, configuration, and management tasks needed for the optimal use of Seeker
- System Administration
  Seeker provides a set of tools that enable administrators to configure, customize, and fine-tune various features and capabilities of the system, as well as integrate external tools.
- User Administration
  Introduces the Seeker role-based access control (RBAC) concept, and outlines the user administration tasks.
  - Configure LDAP/Active Directory
    Enable your organizational LDAP/Active Directory to authenticate users for Seeker.
  - Configure SAML 2.0-based SSO
    To enable single sign-on (SSO) to Seeker, configure Seeker with a 3-rd party identity provider (IdP).
  - Manage Roles
    To benefit from the Seeker role-based access control, define and configure global and project roles.
  - Manage Groups
    To manage user permissions, create and manage user groups.
    - Manage Project Membership for Groups
      Speed up the management of project membership for groups by adding/removing multiple groups to/from multiple projects.
  - Manage Users
    To enable user access to Seeker, define and manage users in the system.
- Project Administration
  Management and configuration tasks that Seeker administrators can perform for projects.
- Maintenance
  To ensure your Seeker system's health, perform periodic maintenance tasks.
- Using APIs
  Seeker provides a set of Web (REST) APIs that expose its basic functionality. You can use these APIs to automate various administration tasks, such as managing projects, exporting vulnerabilities or creating a diagnostic dump.
- Appendix A. Seeker Environment Variables
  Seeker uses a number of operating system (OS) environment variables and Java Virtual Machine (JVM) properties that administrators can configure to customize and fine-tune the behavior of Seeker server and Agents.

Manage Groups

To manage user permissions, create and manage user groups.

In the main menu, click (Settings) > User Management > Groups.
A list of currently defined groups is displayed, including the predefined everyone group.

Click + Add group or Edit in the group's row in the list, and enter or edit the properties:

Property	Description
Type	Select a group type: Seeker LDAP: available only if an LDAP/Active Directory has been configured. SAML 2.0: available only if SAML 2.0-based SSO is configured with a SAML response group membership attribute. For instructions, see Configure SAML 2.0-based SSO.
Name	A unique name for the group. For a group of the LDAP or SAML 2.0 type, the name should match an existing respective group name.
Friendly name	An optional friendly name of the group.
Description	An optional description of the group.
Members	For a group of the Seeker type, select one or more users from the dropdown list to assign to the group. For a group of the LDAP or SAML 2.0 type, this property is irrelevant and disabled. Users from the matching group are automatically added to this group.
Global roles	From the dropdown list, select one or more global roles to assign to the group.

Save your changes.
To delete any group apart from everyone, click Delete in the group's row in the list.

Automation with APIs

You can automate some of these tasks by using Seeker APIs. For the detailed API reference, click (Web API) in the main menu.

/api/{ver}/groups GET: Returns a list of existing groups along with their assigned users and global roles.
/api/{ver}/groups POST: Creates a new group with the specified properties, including the lists of assigned users and global roles.