tiCrypt 2.17.15

Profile

Your profile is the record tiCrypt keeps about your account: who you are, how the system can reach you, the state your account is in, and the certifications that grant you access to projects.

Your profile is not your permissions. Permissions come from the role an administrator assigns you and from your team and project memberships; nothing you change here alters what you are allowed to do. This page describes how to read each part of your profile and change the parts you own.

Overview of Your Profile

ResearcherRequires: User, Sub-admin, Admin, or Super-admin role

Permission requirements

• Basic Team Interaction
  • View own teams
  • Edit own teams (depending on stature per-team)
• Team Administration
  • Create teams
  • Add users to any team arbitrarily
  • Remove users from any team arbitrarily
• Basic Project Interaction
  • View projects they are a member of
  • View other members in projects they are a member of
  • View all security requirements in the system
  • View all security levels in the system
  • View own security requirement certifications
  • Classify resources with projects they are active in
• Project Management
  • Declassify resources tagged with projects they manage
  • Edit metadata for projects they manage
  • Delete projects they manage
  • Add users to projects they manage
  • Edit memberships in projects they manage
  • Remove users from projects they manage
  • Certify users for security requirements
  • Edit user certifications for security requirements
  • Delete user certifications for security requirements
• Basic Group Interaction
  • View groups they are a member of
  • View keys for groups they are a member of
  • Create groups
  • Rename own groups and transfer ownership
  • Add users to groups they are a member of
  • Edit other members in groups they are a member of
  • Remove other users from groups they are a member of
  • Delete groups they are the owner of
• Basic VM Interaction
  • View drives (inconsistent, see notes)
  • Create drives
  • Edit drives (name and whether to disable backup)
  • View drive keys (necessary to share/attach)
  • Share drives
  • Unshare drives
  • Attach drives to VMs
  • Detach drives from VMs
  • View hardware/image setups made available to them
  • View own VM configs and configs shared with them
  • Create (and edit) VM configs
  • Spawn VMs from VM configs
  • Stop VMs spawned from VM configs
  • View own VM username
  • View anyone's VM username (necessary for sharing VMs)
  • Create sub-session for VM->Vault direct transfer
  • View own VMs and VMs shared with them
  • Spawn VMs (without a config)
  • Connect to own VMs and VMs shared with them
  • Share VMs with other users
  • Shutdown own VMs
• Miscellaneous
  • Transfer ownership of own files and drives

Access Your Profile Overview

Location: Open user menu > My Profile

1. Select My Profile. Until you choose an item, the right panel shows Select a tab.
2. Select an item under Properties, Associations, Virtual machines or Miscellaneous in the left panel to view that part of your profile.

Access Your User State

Location: Open user menu > My Profile > Properties

1. Click State in the left panel.

Change Your User State

Location: Open user menu > My Profile > Properties

1. Click State in the left panel.
2. Select Active and escrow on next login, Active, or Inactive.
3. Click the Save button above.

info

You must provide a deactivation reason when you select the Inactive option.

Confirmations, Errors & Solutions

Update User State

Updated user-name's state

Cannot Change My State

Failed to update user-name's state: server-reason

Ask Your Admin to Change Your State

Only a Super-admin can change their own state. Ask an administrator with a higher role than yours to change your state for you.

Verify Your Contact Email

Registration takes an optional contact email separate from your login ID. Check it after registering, since notifications go there.

1. Log in to tiCrypt.
2. Go to Management > Users and select your own row.
3. Check Contact email under Basic info in the detail panel.
4. To change it, select Edit metadata.
5. Correct the Contact Email field.
6. Click Save.

note

My Profile does not show your contact email. Management is available to sub-admins and above who can view all users, and Edit metadata needs the Edit their own and lower-roled users' metadata permission. Otherwise, ask your administrator to check it.

Access Your User Profile

Location: Open user menu > My Profile > Properties

1. Click Profile in the left panel.

Change Your User Profile

Location: Open user menu > My Profile > Properties

1. Click Profile in the left panel.
2. Select the appropriate custom profile.
3. Click the Save button above.

info

If you need a custom profile, contact your administrator.

Confirmations, Errors & Solutions

Updated User Profile

Updated user-name's role

Updated User Profile to Custom

You can now manage permissions manually.

Cannot Change My Profile

Failed to update user-name

Ask Your Admin to Change Your Profile

Only a Super-admin can apply a profile to their own account. Ask an administrator with a higher role than yours to change your profile for you.

Access Your Profile Certifications

Certifications record that you meet a security requirement, such as a special assessment required to access a particular project. This modal lists all your certifications and lets you manage their validity in tiCrypt.

Location: Open user menu > My Profile > Properties

1. Click Certifications in the left panel.

Confirmations, Errors & Solutions

Nothing to Show

This user does not have any certifications.

Ask Your Admin to Add Certifications

Ask your admin to either give you permission to add certifications on your own or grant you the required certification to allow you access.

Certify Yourself for a Project from Profile

Location: Open user menu > My Profile > Properties

1. Click Certifications in the left panel.
2. Click the Add a certificate button in the top panel.
3. In the pop-up, select the requirement and set the expiration date, or tick Never expires if the requirement allows it.
4. Click Certify.

info

The Add a certificate button appears only if you have the Certify users for security requirements permission. With it, you can certify yourself for any security requirement; project ownership or membership is not checked.

Edit or Renew Your User Certification from Profile

Location: Open user menu > My Profile > Properties

1. Click Certifications in the left panel.
2. Select the certification you want to edit or renew.
3. Click the Edit/Renew button in the top right panel.
4. In the pop-up, edit or renew the expiration date.
5. Click Save.

Mark Your User Certification as Expired from Profile

bulk-action

Location: Open user menu > My Profile > Properties

1. Click Certifications in the left panel.
2. Select the certification you want to mark as expired.
3. Click the Open full menu button in the top right panel.
4. Select Mark as expired.
5. In the pop-up, click Mark expired.

Bulk Email Users with Similar User Certifications from Profile

bulk-action

Location: Open user menu > My Profile > Properties

1. Click Certifications in the left panel.
2. Select the similar certifications for users you want to send a bulk email to.
3. Click the Open full menu button in the top right panel.
4. Select Bulk email.
5. In the pop-up, click Copy to copy the emails or click Download to download the emails.
6. Once done, click Close.

Delete Your User Certification from Profile

bulk-action

Location: Open user menu > My Profile > Properties

1. Click Certifications in the left panel.
2. Select the certification you want to delete.
3. Click the Open full menu button in the top right panel.
4. Click the Delete button.
5. In the prompt, click Revoke.

Quick Actions from Your Profile

Your profile provides direct access to manage teams, projects, groups, VMs, and drives without navigating to their dedicated sections. All actions below are available under My Profile in the user menu.

Associations

Navigate to My Profile > Associations to access these sections:

Section	Available Actions	Full Instructions
Teams	View your team memberships; Bulk email team members; Add to team(s) with the Add users to any team arbitrarily permission; Delete a membership if you can remove members from that team	Teams' Resource Usage
Projects	View your project memberships; Bulk email project members; Add to project(s) with the Add users to projects they manage or Arbitrarily add users to any project permission; Edit or Delete a membership with the matching edit or remove project membership permission	Projects
Groups	View the groups you are a member of; Add to one of your groups with the Add users to groups they are a member of permission; delete a membership with Remove member from group, which needs the Remove other users from groups they are a member of permission	Groups

Virtual Machines

Navigate to My Profile > Virtual Machines to access these sections:

Section	Available Actions	Full Instructions
VM Configurations	Start, share, edit, delete VM configurations; bulk email users	Create & Configure
Running VMs	Open RDP, transfer files, open SFTP, open terminal, restart controller, repair database, view logs, export JSON, open VNC, share, restart, shut down	Connect & Access
Drives	Share, edit, change project tag, migrate, bulk email users, transfer ownership, unshare, delete	Drives

Miscellaneous

Navigate to My Profile > Miscellaneous to access the Sub-admin Managed Objects and Manual Permission Management sections documented below.

---

View Your Sub-admin's Assigned Objects from Profile

Location: Open user menu > My Profile > Miscellaneous

1. Click Sub-admin Managed Objects in the left panel.
2. View the teams and projects you have been granted management rights for.

note

This section appears in your own profile only when your role is Sub-admin and you have the View all teams in the system and View all projects in the system permissions.

Grant Management Rights to Sub-admins from Profile

Location: Open user menu > My Profile > Miscellaneous

1. Click Sub-admin Managed Objects in the left panel.
2. Click the Grant management rights button in the top right panel.
3. In the pop-up, select the sub-admin manager, the object type and the object name.
4. Click Accept.

Assign Objects to Sub-admins from Profile

bulk-action

Location: Open user menu > My Profile > Miscellaneous

1. Click Sub-admin Managed Objects in the left panel.
2. Select the object(s) to assign to a sub-admin.
3. Click the Assign to Sub-admin button in the top right panel.
4. In the pop-up, enter the sub-admin name you want to assign the object to.
5. Click Accept.

tip

Select multiple objects to assign them in bulk.

Bulk Email Sub-admins of Objects from Profile

bulk-action

Location: Open user menu > My Profile > Miscellaneous

1. Click Sub-admin Managed Objects in the left panel.
2. Select the managed object(s) whose sub-admins you want to bulk email.
3. Click the Bulk email button in the top right panel.
4. In the pop-up, click Copy to copy the emails or click Download to download the emails.
5. Once done, click Close.

Revoke Management Rights of Sub-admins from Profile

bulk-action

Location: Open user menu > My Profile > Miscellaneous

1. Click Sub-admin Managed Objects in the left panel.
2. Select the object(s) for which you want to revoke management rights.
3. Click the Revoke management rights button in the top right panel.
4. In the pop-up, click Yes.

Access Your Manual Permission Management from Profile

Location: Open user menu > My Profile > Miscellaneous

1. Click Manual permission management in the left panel.

Change Your User Role

Location: Open user menu > My Profile > Miscellaneous

1. Click Manual permission management in the left panel.
2. Click the Change role button in the top right panel.
3. In the pop-up, select User, Sub-administrator, Administrator, or Super-administrator.
4. Once done, click Demote or Promote based on your selection.

Change Your User Permissions

Location: Open user menu > My Profile > Miscellaneous

1. Click Manual permission management in the left panel. If the panel shows This user has a profile set., click Switch to custom profile first.
2. Tick or untick the appropriate permissions for you in the system.
3. Once done, click the Save button above.

caution

Only a Super-admin can change their own role, state or permissions. Other roles can change these only for users with a lower role, and need the matching permission, such as Promote lower-roled users up to own role or Edit lower-roled users' permissions.

warning

Removing certain permissions from your own account can lock you out of features you need. Review changes carefully before saving.