At a high-level, the Intigriti platform offers various roles split into “Company” and “Program” roles. Users can either be assigned at company level or at program level which the company may be running. This is especially useful in situations where a parent company is running multiple bug bounty programs for its different subsidiaries.
Difference in Roles and Permissions
Within the Company, there are two roles: "Company Admin" and "Company Member".
The “Company Admin” role should be assigned to the person responsible for the management of the whole company in the Intigriti platform. This user can then invite and manage users to the platform, assigning them the correct role in relation to their involvement with the programs.
The below diagram highlights the different permissions each role has.
Within a program, there are four roles: "Program Admin", "Program Member", "Program Editor" and "Program Reader
The “Company Admin” will be suggested and assigned during the onboarding phase upon becoming an Intigriti customer. They can then start adding company members who will be using the platform and assigning them the relevant roles.
Managing the Different Roles
Adding Company Members
Admin -> Company Members -> Add Company Member
The "Company Admin" can then start assigning "Company Members" to programs. This allows the admin to assign users to programs that are most relevant to them.
Adding Program Members
Select Program -> More -> Members -> Add Program Member
When adding a member to a program, the admin can select an existing company member or invite a user to join the platform and assign them the appropriate role.
Once a program closes, the admin can remove the members from the program, or just assign them to a new one. A company member can also be in multiple programs.