In an MSR organization, user permissions and repositories must be configured.

An XCCDF Rule

Description

<VulnDiscussion>Configuring user permissions, organizations, and repositories in MSR is crucial for maintaining a secure, organized, and efficient container image management environment. This will provide access control, security, and compliance when utilizing MSR.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID: SV-260904r966069_rule
Severity: Medium
References: CCI-001499
Updated: 19 days ago

If MSR is not being utilized, this is Not Applicable.

Set the organizations, user permissions, and repositories in MSR so they are configured per the SSP.

1. Modify Organizations according to the SSP by logging in to the MSR web UI as Admin and navigating to Organizations.
To delete an Organization:
- Click on the "Organization".
- Click the "Settings Tab".
- Click "Delete".
- Confirm and click "Delete".

To Add an Organization:
- Click "New organization".
- Input the Organization name.
- Click "Save".

To Assign Users to an Organization:
- Click on an Organization.
- Under the Members tab, click "Add user".
- Select "New" or "Existing".
- Fill in User information.
- Click "Save".

2. Modify Users according to the SSP.
- Navigate to "Users".

To add a User:
- Click "New User".
- Fill in User information.
- Click "Save".

To Delete a User:
- Click on the "User".
- Select "Settings Tab".
- Click "Delete User".
- Confirm and click "Delete".

3. Modify Repositories according to the SSP:
- Click on the User.
- Under the Repositories tab, modify the assigned repositories to what is appropriate per the SSP.

In an MSR organization, user permissions and repositories must be configured.

Description

Remediation - Manual Procedure