Home / Help centre / Authentication & logins
Authentication & logins
What privilege levels can a role have?
A role can have one of four privilege levels: Unauthenticated, User, Elevated or Admin. The default is User. You pick it in the Privilege level select on the role card, and it shows as a badge on the card. Choose the one that matches the real account.
The short version
Four levels exist: Unauthenticated, User, Elevated and Admin. User comes preselected. The level is a label for what kind of account the role stands for.
How it works in Cyberlop
Set the level in the Privilege level select on the role card. Once chosen, it appears as a badge in the card's header, next to the method badge. On the Scan Profiles list, the Auth roles column shows how many roles each profile has.
| Level | Typical use |
|---|---|
| Unauthenticated | A visitor with no account |
| User | An ordinary account |
| Elevated | An account with more rights than a normal user |
| Admin | An administrator account |
Match the level to the real account behind the credentials. An honest label makes a report easier to read months later, when nobody remembers why a role was set up. It also stops a normal account from being labelled Admin by habit. The documentation recommends a second user for IDOR and privilege testing, so a common pair is a User and an Admin, or two Users.
The captured screens do not describe extra behaviour tied to each level beyond the label, so treat the choice as the honest description of the account. Not sure how your accounts map? Ask through /contact.
What to do next
See how to set a privilege level, then set up two roles. The idea is close to privilege escalation.
Related questions
- How do I set a role's privilege level?
- What is an authentication role?
- How do I add a login role to a scan profile?
- How do I set up two user roles so the scanner can test access between accounts?
- Which login methods does Cyberlop support for scanning behind a login?
How to scan behind login in Cyberlop with authentication roles
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.