Security settings

The security settings control how users log in to your tenant, from which IP addresses they can log in, and whether administrators of parent tenants can manage your tenant.

In Cyber Console, the Security screen is under Settings > General settings > Security.

The screen opens on your own tenant, with its settings loaded. When you select a customer in the tenant selector on the screen, the screen shows the settings of that customer. You can configure support access only for your own tenant.

Two-factor authentication

When two-factor authentication is enabled, every user of the tenant logs in with a username, a password, and a time-based one-time password (TOTP) code. The code comes from an authentication application on the second-factor device of the user.

Two-factor authentication is enabled for every partner tenant in production mode. A trial partner tenant gets two-factor authentication when it is switched to production mode. After two-factor authentication is enabled for a partner tenant, you cannot disable it. You can disable two-factor authentication only for a customer tenant.

Folders inherit the two-factor authentication setting of their partner tenant. You cannot configure two-factor authentication for a folder or a unit.

You can enable or disable two-factor authentication for a customer only if support access is enabled for that customer.

Login control

Login control limits login to a tenant to the IP addresses, IP ranges, and subnets that you allow. The limit applies only to the users of the tenant, not to the users of its child tenants. The limit also applies to access through the API.

Support access

Support access determines what administrators of parent tenants can do in your tenant.

Support access	Administrators of parent tenants can
Enabled	Modify the properties of your tenant, manage tenants, users, and services in your tenant, and access recovery points and other resources in your tenant
Disabled	Modify only the properties of your tenant