Reward Manager Roles - Programme Security Administrator

Scenario:

I need to update the security settings of a program.

Role Name: 

Programme Security Administrator

Internal or External Role?

Both

Description / Role Privileges: 

Ability to manage security settings of a programme.

Relevant SmartDashboard, Product or System: 

System

Menu Options: 

Security

Submenu Options: 

• Basic settings
• Password Settings
• Login Challenges
• Security and Privacy Resources
• Audit

Role Sees (what they can see): 

• Basic settings - Can manage the basic security settings of the scheme.
  If the user also has a Member Access Control Administrator role, they will be able to export a list of administrators including Membership number, Names, RG ID, Roles.
• Password Settings - Can manage password policies of the scheme.
  If the user also has a Member Access Control Administrator role, they will be able to send password reset instructions to member.
• Login Challenges - Can manage additional login challenges for security purposes
  If the user also has the 2FA Administrator role, they will be able to manage the 2FA settings of the scheme. They will be able to see a list of all members including First Name, Last Name, Employee ID, Two-factor Site Type, Two-factor Setup Type and will also be able to reset their 2F.
• Security and Privacy Resources - Can access information about privacy and security on the platform.
• Audit - Can view audit logs on the program - Can see a list of events including Successful Login, Failed Login, Username has been changed, Password reset Entry success, Password change, Username Change, Captcha failed, Role has been added, Role has been removed. The list contains details on Date and time, IP address, Member, Done by admin, and can be filtered by date range or member.

Role Edits (detailed list of tasks): 

• Can manage the basic security settings of the scheme.
• Can manage password policies of the scheme.
• Can manage additional login challenges for security purposes
• If the user also has the 2FA Administrator role, they will be able to manage the 2FA settings of the scheme.

How to Configure the Role:

To be added