CMS-01—Customer Administrative Access

>Control Description

For products that enable customers to manage their end users, privileged user roles exist with the capability to manage end user access to the relevant applications.

Theme

Technology

Type

Preventive

Policy/Standard

Access Control Policy

>Implementation Guidance

1. In cases where customers can manage the access of their end users, ensure that ability to configure privileged user roles exist. 2. Ensure that the customer's privileged user roles can manage end user access to the relevant applications.

>Testing Procedure

1. Validate whether the customers can configure privileged user roles. 2. Inspect whether the customer defined privileged user roles can manage end user access to relevant applications.