Documentation

Chapter 4 — Users, 2FA, and Session Security

Manage your profile, secure sign-in with two-factor authentication or Google SSO, control team access, reset passwords, and apply security best practices for your tenant.

Section 4.1

Profile and settings

  • Open Settings from the sidebar. Sections include Profile, Security, Users & Roles (tenant admins only), and Preferences.
  • Upload or change your profile avatar (JPG, PNG, or WebP up to 5 MB) from the Profile section.
  • View your organization, email, and role. Name and email fields are read-only and managed by your organization administrator.
  • Under Preferences, choose light, dark, or system theme. Theme changes apply immediately and are saved for future visits.
  • Tenant admins can also open the Users sidebar link, which opens the same Users & Roles management page.
Example View
Example customer portal user management and 2FA security settings layout

Section 4.2 — Password reset

If you sign in with email and password, use Forgot password? on the sign-in page. Enter your work email and CloudSure sends reset instructions when an account exists. Reset links expire after one hour for security. Google SSO users can continue using Continue with Google or set a password through the reset flow if needed.

Section 4.3 — Two-factor authentication (2FA)

Under Security in Settings, enable or disable TOTP-based two-factor authentication using an authenticator app (Google Authenticator, Authy, Microsoft Authenticator, or similar). When 2FA is enabled, you must enter a 6-digit code after your password. On the verification screen, you can trust the current browser to skip 2FA on return visits for a limited period—you still need your password each time. Use Continue with Google on the sign-in page when Google SSO is enabled for your deployment.

Section 4.4

Users, roles, and RBAC

Admin users can add team members with a temporary password, assign Admin or User roles, and view the team member list. User role members can run scans and review findings but cannot manage other users. Assign individual accounts instead of sharing one login across your team.

Section 4.5

Security recommendations

Enable 2FA for administrator accounts. Scope cloud credentials to least privilege for scanning only. Sign out from the sidebar when finished on shared workstations. Only trust browsers you control. Review the Privacy Policy for data handling practices.

Return to index

Browse all chapters from the Customer Portal Documentation Index.