Panorays allows admins to efficiently manage users and their permissions within your organization. User Management includes inviting new members, editing existing users, deactivating or activating accounts, and controlling access with predefined or custom roles.
❓What admins can do in User Management
Admins can:
Invite new users
Edit existing users
Activate or deactivate user accounts
Search users by name or email
Filter users by:
Roles
Portfolios
Status
When adding a user, admins must select a user role. Each role defines the user’s access level and permissions.
🔄 System Roles Overview
Here’s a summary of the default user roles and their capabilities:
Admin
Full access to all system functionality
Manage teams and notifications
Third-Party Security Manager
Assess and manage third-party security risk
Add and edit suppliers, send questionnaires, add internal notes
Security Posture Manager
Visibility into your company’s security profile
Ability to respond to questionnaires and manage remediation
Share your Security Passport
Contract Owner
Limited access to initiate third-party assessments
Can add suppliers and start external assessments
Observer
Read-only access to most system functionality
Cannot access questionnaire templates or third-party portfolio management
Combining Roles
Some roles can be combined to give users broader capabilities:
Role 1 | Role 2 | Permissions |
Third-Party Security Manager | Security Posture Manager | Add/edit suppliers, send/respond to questionnaires, edit internal notes, view reports, Security Profile & Security Passport |
Third-Party Security Manager | Observer | Add/edit suppliers, send questionnaires, add internal notes, view Security Profile & Security Passport |
Security Posture Manager | Observer | View/edit Security Profile, respond to questionnaires, view/share Security Passport, view suppliers, reports |
Security Posture Manager | Contract Owner | View/edit Security Profile, respond to questionnaires, add/edit own suppliers, view/share Security Passport |
Contract Owner | Observer | Add/edit own suppliers, view suppliers added by others, view Security Profile & Security Passport, reports |
🔍Accessing User Management
Click Company Settings in the left-hand menu.
Select User Management.
You’ll see a list of all users in your environment, along with a New User option for inviting additional team members.
➕Adding a new user
Click New User.
Enter the user’s email address (name is optional).
Select the relevant user role(s).
If a role is greyed out, it means the selected role already includes those permissions.
Assign portfolios (optional).
Select which notifications the user should receive.
Click Invite (top right).
The user will receive an email invitation to create a password and log in.
✏️Editing an existing user
Click the user’s name from the user list.
Update their name, role(s), portfolios, or notifications.
Click Save to apply the changes.
Deactivate a user
Open the user’s profile.
Click Deactivate Account (top right).
The user will no longer be able to access Panorays. They will still appear in the user list, but greyed out.
Reactivate a user
Open the user’s profile.
Click Enable Access.
Inviting users via Single Sign-On (SSO)
If your organization uses SSO:
Assign the user to the Panorays application in your Identity Provider.
Once the user logs in for the first time, they will appear in User Management.
The admin can then assign the appropriate role and permissions.