diff --git a/docs/manage/security/enable-support-account-new.md b/docs/manage/security/enable-support-account-new.md new file mode 100644 index 0000000000..1ac3fed74f --- /dev/null +++ b/docs/manage/security/enable-support-account-new.md @@ -0,0 +1,52 @@ +--- +id: enable-support-account-new +title: Enable Support Account Access +description: Allow Sumo Logic support users to troubleshoot and resolve issues directly in your environment. +--- + + + + + +

Beta

+ + +import useBaseUrl from '@docusaurus/useBaseUrl'; + +Administrators at your company can enable support account access to your organization, which allows Sumo Logic support users to review and resolve complex issues. These users are added to your organization's Sumo Logic account. Your administrators can approve access for specific Sumo Logic support users for a set time period, and can revoke access when access is no longer needed. + +:::important +Remember to capture any content created by the Sumo Logic support users and assign to another user before revoking access. +::: + +## Enable support account access to your organization + +To enable support account access to your organization for specific Sumo Logic support users: + +1. Work with your Sumo Logic support engineer or account representative to determine if you need to grant access to Sumo Logic support users. If access is needed, you must enable it on the **Policies** page. +1. [**New UI**](/docs/get-started/sumo-logic-ui). In the main Sumo Logic menu select **Administration**, and then under **Account Security Settings** select **Policies**. You can also click the **Go To...** menu at the top of the screen and select **Policies**.
[**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Administration > Security > Policies**. +1. Under **Support Account Access**, select the **Enable Support Account Access** check box. (Only administrators with the [Manage Support Access](/docs/manage/users-roles/roles/role-capabilities/#security) role capability can set this checkbox.) Now you are ready to accept account access requests from Sumo Logic support users.
Support Account Access checkbox +1. When support access is requested, Sumo Logic sends an email to administrators or users with the Manage Support Access capability with details about the request. Click **Manage Access** in the email.
Support Account Access email +1. You are redirected to the Sumo Logic **Policies** page, and the support user's access request appears in a table under **Support Account Access**. Click **Approve Access** to approve the support user's request, or click **Deny Access** to cancel the access request.
Support Account Access request +1. When you click **Approve Access**, a dropdown box appears. Select the duration for the support user's access:
Support Account Access duration dropdown +1. Once you have approved access for a specific Sumo Logic support user, the **Approved By** column shows your name, and the **Expires On** column shows the final day of access. The listed support user will have access to your organization for the duration of that time period.
Support Account Access accepted +1. Depending on the nature of the work that must be done to troubleshoot in your environment, additional support users may request access. Approve these users as needed.
Multiple Support Account Access users +1. To remove access for a user, click **Revoke Access**. To disable Sumo Logic support account access altogether, deselect the **Enable Support Account Access** check box. + +## FAQ + +### Who can access my account? + +When a support user requests access, they are asked for the explicit reason why access is required. Additionally, you can control the amount of time the support user can access your account to ensure it is limited to the shortest amount of time necessary to complete the investigation. + +### Do I need to create a special user account?  + +No, the Sumo Logic support user is automatically added to your organization's account. If you accidentally delete the user, you can just disable, then re-enable the **Enable Support Account Access** checkbox, and the Sumo Logic support user will be recreated. However, any content created or shared from the previous iteration of the Sumo Logic support user will be deleted. + +### How do I find out who enables or disables support account access? + +Support account access events are recorded in the [Audit Event Index](/docs/manage/security/audit-indexes/audit-event-index). To find these events, run the following query: + +```text +_index=sumologic_audit_events _sourceCategory=supportAccount +``` diff --git a/static/img/security/enable-support-account-access-checkbox.png b/static/img/security/enable-support-account-access-checkbox.png new file mode 100644 index 0000000000..ee9aa1d0bb Binary files /dev/null and b/static/img/security/enable-support-account-access-checkbox.png differ diff --git a/static/img/security/enable-support-account-access-duration-dropdown.png b/static/img/security/enable-support-account-access-duration-dropdown.png new file mode 100644 index 0000000000..bf4561c613 Binary files /dev/null and b/static/img/security/enable-support-account-access-duration-dropdown.png differ diff --git a/static/img/security/enable-support-account-access-email.png b/static/img/security/enable-support-account-access-email.png new file mode 100644 index 0000000000..d6066032ab Binary files /dev/null and b/static/img/security/enable-support-account-access-email.png differ diff --git a/static/img/security/enable-support-account-access-user-access-accepted.png b/static/img/security/enable-support-account-access-user-access-accepted.png new file mode 100644 index 0000000000..fbc73bd416 Binary files /dev/null and b/static/img/security/enable-support-account-access-user-access-accepted.png differ diff --git a/static/img/security/enable-support-account-access-user-request.png b/static/img/security/enable-support-account-access-user-request.png new file mode 100644 index 0000000000..edd47b495b Binary files /dev/null and b/static/img/security/enable-support-account-access-user-request.png differ diff --git a/static/img/security/enable-support-account-access-users.png b/static/img/security/enable-support-account-access-users.png new file mode 100644 index 0000000000..1c35a83b62 Binary files /dev/null and b/static/img/security/enable-support-account-access-users.png differ