How do I set a role's privilege level?

Steps

1. Open a scan profile and click Authentication in the switcher.
2. Find the role card. If there is none, click + Add role first.
3. Look under the Name field for Privilege level. It is a select menu and starts on User.
4. Open the menu and choose the level that fits the account whose credentials you are using.
5. Check the badge in the card header. It shows the level next to the method, for example "Admin" and "Form".
6. Click Save.

Good to know

The level is a label. It says what kind of account this role represents, and it should tell the truth about that account whenever your team or a report reader looks at it later. Match it to the real account. If the account is an ordinary customer, choose User. If it is an administrator, choose Admin. Do not raise it in the hope of more coverage.

Level	Typical account
Unauthenticated	A visitor with no login
User	A normal customer or member
Elevated	An account with extra rights, such as a manager
Admin	An administrator account

The meanings in the right-hand column are our plain-English reading. The app lists the four names and does not give longer definitions.

The in-app guide recommends a normal user and, for access testing, a second account at another level. Roles at different levels let the scan compare what each account can reach, and so spot data or functions that a lower account should never see. See how to use two roles for access testing.

Related guides: privilege levels explained, add a login role and run an unauthenticated scan. The tutorial is authentication roles.

Related questions

• What privilege levels can a role have?
• How do I add a login role to a scan profile?
• How do I set up two user roles so the scanner can test access between accounts?
• How do I run a scan without any login?
• What is an authentication role?

Full tutorial

How to scan behind login in Cyberlop with authentication roles

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre