Users and sign-in

Garrison has its own user accounts. Public sign-up is off: an administrator creates every account under Settings → Users.

Admins and standard users

	Admin	Standard user
Chat, cases, findings, hunts, reports	Yes	Yes
Systems they enrolled	Yes	Yes (their own)
Approve changes	Yes	Their own requests and the integration types they are granted
Integrations (cloud, SIEM, devices)	All	Only the types an admin grants them
AI Gateway, Cluster, AI Audit	Yes	No
Users, Appliance, Notifications, Escalation, Audit log	Yes	No

To grant a standard user an integration type (for example SIEM), edit the user under Settings → Users.

Passwords

Users change their own password under Settings → Account. An admin can reset a user’s password from Settings → Users.

Audit

Every sign-in, approval, terminal session, command sent to an agent and change to users is recorded in Settings → Audit log.