Users & Access

​

Overview

Users are workspace members with assigned roles. Each role grants a set of permissions that control what actions a user can take. Your VCS identity (GitHub or GitLab account) can also be linked to your Cysmiq user to sync repository-level permissions.

​

Roles

Each workspace has predefined roles with different permission levels:

​

VCS identity linking

When you authenticate with GitHub or GitLab, your VCS identity can be linked to your Cysmiq user. This enables:

• Automatic permission sync: your repository access in GitHub/GitLab maps to Cysmiq permissions
• Attribution: vulnerabilities can be attributed to the developer who introduced them
• VCS login: sign in with GitHub when enabled for the workspace

​

VCS permission sync

For users with the Developer role, permissions are inherited from your VCS platform:

​

Permission structure

Permissions follow a domain:action:resource pattern:

• repository:view:*: view all repositories
• vulnerability:edit:repo-123: edit vulnerabilities in a specific repository
• user:invite: invite new users to the workspace

This structure allows both broad role-based access and fine-grained repository-level permissions.

​

Related guides

• Invite your team: Add members and manage pending invitations
• Manage members: Change roles, suspend members, or remove workspace access