Managing user & team permissions

Account administrators can fine-tune permissions for users and teams associated with the account. This article includes instructions for:

• Adjusting user permissions
• Adjusting team permissions

To adjust user permissions:

1. Log in to the NS1 portal, and navigate to Account Settings > Users & Teams.

2. Click the Users tab to view a list of users associated with your account.

3. Locate the user whose permissions you want to modify, and click the edit icon (pencil).

4. In the Manage User window, edit any of the following information:
   
   • Enter any basic information—the username, email, and full name of the user you're adding.
   
   • Enable or disable the option to notify this user about important billing events.
   
   • Optionally, select a team whose permissions this user should inherit. Note: This also adds the user to the selected team.
   
   • If you do not associate the user with a team, you can modify the following individual user settings:

   Option	Description
   Manage plan	Allows the user to change the account type (upgrading/downgrading query limits and pricing).
   Manage users	Allows the user to create or edit users and modify permissions.
   View invoices	Allows the user to view account invoices.
   Manage teams	Allows the user to create or edit teams and modify permissions.
   View activity log	Allows the user to view the detailed account-wide activity log.
   Manage account settings	Allows the user to modify admin contact information and other general settings.
   Manage API keys	Allows the user to create API keys in the NS1 portal and modify settings.
   Manage payment methods	Allows the user to modify the payment method (credit card) associated with the account.
   Manage IP whitelists	Allows the user to add or remove IP whitelist records.
   Manage jobs	Allows the user to create, edit, and remove active monitoring jobs.
   Manage lists	Allows the user to add or remove notification lists.
   View jobs	Allows the user to view active monitoring jobs.
   Allow zone management	Sets the default option to allow the user to access all zones. Optionally, you can toggle the Add exceptions button. If Allow Zone Management is selected, then the user will be allowed to view or manage all zones excluding any zone exceptions listed. To deny access to certain zones (i.e. adding exceptions): Start typing the name of the zone to which you would like to deny the user access, and then select it from the list. To deny access only to certain records within the zone: Choose Select Records, and start typing the domain name of the record or choose a record type from the drop-down menu to deny the user access to all records of a certain type within that zone. Additionally, you have the option to include or exclude all subdomains within the zone (ex. Including all subdomains of bar.com excludes subdomain.bar.com).
   Deny zone management	Sets the default option to deny the user access to all zones. Optionally, you can toggle the Add exceptions button. If “Deny Zone Management” is selected, the user will only be able to view or manage zones (and/or records) listed as “exceptions.” To allow access to certain zones (i.e. adding exceptions): Start typing the name of the zone to which you would like to allow the user access, and then select it from the list.  To allow access only to certain records within the zone, choose Select Records, and start typing the domain name of the record or choose a record type from the drop-down menu to allow the user access to all records of a certain type within that zone. Additionally, you have the option to include or exclude all subdomains within the zone (ex. Including all subdomains of bar.com excludes subdomain.bar.com).
   Push to data feeds	Allows the user to send updates for data feeds.
   Manage data sources	Allows the user to create, modify, delete data sources.
   Manage data feeds	Allows the user to create, modify, delete data feeds.
   Manage global 2FA	Allows the user to enable or disable two-factor authentication (2FA) for all users in the organization.

   
   • Optionally, under Manage IP whitelist for this user, start typing the name of an existing whitelist to apply to this user. If the user is associated with a team, this whitelist will supplement any whitelist records configured at the team-level permissions. Additionally, any account-wide (global) IP whitelists will also take effect. If desired, you can check the box next to Apply this IP whitelist exclusively to ignore global or team whitelists.

5. When finished, click Save Changes.

To adjust team settings:

1. Log in to the NS1 portal, and navigate to Account Settings > Users & Teams.

2. Click the Teams tab to view a list of teams associated with your account.

3. Locate the user whose permissions you want to modify, and click the edit team icon (pencil).

4. In the Manage User window, edit any of the following information:

   • Edit the team name.

   • Under Add user to team, start typing the name of an existing user to add them.

   • Optionally, modify any of the following team settings:

   Option	Description
   Manage plan	Allows team members to change the account type (upgrading/downgrading query limits and pricing).
   Manage users	Allows team members to create or edit users and modify permissions.
   View invoices	Allows team members to view account invoices.
   Manage teams	Allows team members to create or edit teams and modify permissions.
   View activity log	Allows team members to view the detailed account-wide activity log.
   Manage account settings	Allows team members to modify admin contact information and other general settings.
   Manage API keys	Allows team members to create API keys in the NS1 portal and modify settings.
   Manage payment methods	Allows team members to modify the payment method (credit card) associated with the account.
   Manage IP whitelists	Allows team members to add or remove IP whitelist records.
   Manage jobs	Allows team members to create, edit, and remove active monitoring jobs.
   Manage lists	Allows team members to add or remove notification lists.
   View jobs	Allows team members to view active monitoring jobs.
   Allow zone management	Sets the default option to allow team members to access all zones. Optionally, you can toggle the Add exceptions button. If Allow Zone Management is selected, then team members will be allowed to view or manage all zones excluding any zone exceptions listed (see below). To deny access to certain zones (i.e. adding exceptions): Start typing the name of the zone to which you would like to deny team members access, and then select it from the list.  To deny access only to certain records within the zone: Choose Select Records, and start typing the domain name of the record or choose a record type from the drop-down menu to deny team members access to all records of a certain type within that zone. Additionally, you have the option to include or exclude all subdomains within the zone (ex. Including all subdomains of bar.com excludes subdomain.bar.com).
   Deny zone management	Sets the default option to deny team members access to all zones. Optionally, you can toggle the Add exceptions button. If “Deny Zone Management” is selected, team members will only be able to view or manage zones (and/or records) listed as “exceptions.” To allow access to certain zones (i.e. adding exceptions): Start typing the name of the zone to which you would like to allow team members access, and then select it from the list.  To allow access only to certain records within the zone, choose Select Records, and start typing the domain name of the record or choose a record type from the drop-down menu to allow team members access to all records of a certain type within that zone. Additionally, you have the option to include or exclude all subdomains within the zone (ex. Including all subdomains of bar.com excludes subdomain.bar.com).
   Push to data feeds	Allows team members to send updates for data feeds.
   Manage data sources	Allows team members to create, modify, delete data sources.
   Manage data feeds	Allows team members to create, modify, delete data feeds.
   Manage global 2FA	Allows team members to enable or disable two-factor authentication (2FA) for all users in the organization.