-
Notifications
You must be signed in to change notification settings - Fork 233
SUMO-276800 - Support Account Access beta #6219
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
jpipkin1
wants to merge
10
commits into
main
Choose a base branch
from
sumo-276800-support-account-access-beta
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Changes from all commits
Commits
Show all changes
10 commits
Select commit
Hold shift + click to select a range
9646169
SUMO-276800 - Support Account Access beta
jpipkin1 f9224cc
Fix broken link
jpipkin1 c1db218
Update docs/manage/security/enable-support-account-new.md
jpipkin1 6842dbb
Update docs/manage/security/enable-support-account-new.md
jpipkin1 3f5d107
Update docs/manage/security/enable-support-account-new.md
jpipkin1 fc165aa
Update docs/manage/security/enable-support-account-new.md
jpipkin1 4bc5010
Update docs/manage/security/enable-support-account-new.md
jpipkin1 c921627
Updates from Kevin Keech review
jpipkin1 9fc65e4
Merge branch 'main' into sumo-276800-support-account-access-beta
jpipkin1 6348e33
Add FAQ section about audit event index
jpipkin1 File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,52 @@ | ||
| --- | ||
| id: enable-support-account-new | ||
| title: Enable Support Account Access | ||
| description: Allow Sumo Logic support users to troubleshoot and resolve issues directly in your environment. | ||
| --- | ||
|
|
||
| <head> | ||
| <meta name="robots" content="noindex" /> | ||
| </head> | ||
|
|
||
| <p><a href={useBaseUrl('docs/beta')}><span className="beta">Beta</span></a></p> | ||
|
|
||
|
|
||
| import useBaseUrl from '@docusaurus/useBaseUrl'; | ||
|
|
||
| Administrators at your company can enable support account access to your organization, which allows Sumo Logic support users to review and resolve complex issues. These users are added to your organization's Sumo Logic account. Your administrators can approve access for specific Sumo Logic support users for a set time period, and can revoke access when access is no longer needed. | ||
|
|
||
| :::important | ||
| Remember to capture any content created by the Sumo Logic support users and assign to another user before revoking access. | ||
| ::: | ||
|
|
||
| ## Enable support account access to your organization | ||
|
|
||
| To enable support account access to your organization for specific Sumo Logic support users: | ||
|
|
||
| 1. Work with your Sumo Logic support engineer or account representative to determine if you need to grant access to Sumo Logic support users. If access is needed, you must enable it on the **Policies** page. | ||
| 1. [**New UI**](/docs/get-started/sumo-logic-ui). In the main Sumo Logic menu select **Administration**, and then under **Account Security Settings** select **Policies**. You can also click the **Go To...** menu at the top of the screen and select **Policies**. <br/>[**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Administration > Security > Policies**. | ||
| 1. Under **Support Account Access**, select the **Enable Support Account Access** check box. (Only administrators with the [Manage Support Access](/docs/manage/users-roles/roles/role-capabilities/#security) role capability can set this checkbox.) Now you are ready to accept account access requests from Sumo Logic support users.<br/><img src={useBaseUrl('img/security/enable-support-account-access-checkbox.png')} alt="Support Account Access checkbox" style={{border: '1px solid gray'}} width="500" /> | ||
| 1. When support access is requested, Sumo Logic sends an email to administrators or users with the Manage Support Access capability with details about the request. Click **Manage Access** in the email.<br/><img src={useBaseUrl('img/security/enable-support-account-access-email.png')} alt="Support Account Access email" style={{border: '1px solid gray'}} width="300" /> | ||
| 1. You are redirected to the Sumo Logic **Policies** page, and the support user's access request appears in a table under **Support Account Access**. Click **Approve Access** to approve the support user's request, or click **Deny Access** to cancel the access request.<br/><img src={useBaseUrl('img/security/enable-support-account-access-user-request.png')} alt="Support Account Access request" style={{border: '1px solid gray'}} width="800" /> | ||
| 1. When you click **Approve Access**, a dropdown box appears. Select the duration for the support user's access: <br/><img src={useBaseUrl('img/security/enable-support-account-access-duration-dropdown.png')} alt="Support Account Access duration dropdown" style={{border: '1px solid gray'}} width="150" /> | ||
| 1. Once you have approved access for a specific Sumo Logic support user, the **Approved By** column shows your name, and the **Expires On** column shows the final day of access. The listed support user will have access to your organization for the duration of that time period.<br/><img src={useBaseUrl('img/security/enable-support-account-access-user-access-accepted.png')} alt="Support Account Access accepted" style={{border: '1px solid gray'}} width="800" /> | ||
| 1. Depending on the nature of the work that must be done to troubleshoot in your environment, additional support users may request access. Approve these users as needed.<br/><img src={useBaseUrl('img/security/enable-support-account-access-users.png')} alt="Multiple Support Account Access users" style={{border: '1px solid gray'}} width="800" /> | ||
| 1. To remove access for a user, click **Revoke Access**. To disable Sumo Logic support account access altogether, deselect the **Enable Support Account Access** check box. | ||
|
|
||
| ## FAQ | ||
|
|
||
| ### Who can access my account? | ||
|
|
||
| When a support user requests access, they are asked for the explicit reason why access is required. Additionally, you can control the amount of time the support user can access your account to ensure it is limited to the shortest amount of time necessary to complete the investigation. | ||
|
|
||
| ### Do I need to create a special user account? | ||
|
|
||
| No, the Sumo Logic support user is automatically added to your organization's account. If you accidentally delete the user, you can just disable, then re-enable the **Enable Support Account Access** checkbox, and the Sumo Logic support user will be recreated. However, any content created or shared from the previous iteration of the Sumo Logic support user will be deleted. | ||
|
|
||
| ### How do I find out who enables or disables support account access? | ||
|
|
||
| Support account access events are recorded in the [Audit Event Index](/docs/manage/security/audit-indexes/audit-event-index). To find these events, run the following query: | ||
|
|
||
| ```text | ||
| _index=sumologic_audit_events _sourceCategory=supportAccount | ||
| ``` | ||
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+42.5 KB
static/img/security/enable-support-account-access-duration-dropdown.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+78.2 KB
static/img/security/enable-support-account-access-user-access-accepted.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.