Skip to main content
ContraForce provides flexible user management with role-based access control. Add users from your Entra ID directory, assign organizational and workspace roles, and control exactly what each team member can access. Setting up default groups during initial configuration saves time and ensures consistent access patterns. Suggested Partner Groups
ContraForce integrates with Microsoft Entra ID (formerly Azure AD) to pull user identities. Users must exist in Entra ID before they can be added to ContraForce.

​
User Management Overview

Organizational Roles

Control who can manage users, groups, and workspace settings across your organization

Workspace Roles

Define what users can do within specific customer workspaces

​
User Roles at a Glance

ContraForce uses a two-tier role system: Organizational Roles control administrative access, while Workspace Roles control operational access.

​
Workspace Roles Quick Reference

Complete Role Reference

View detailed permissions for all organizational and workspace roles

​
When to Add Users

Adding users is not part of module onboarding. First, sign in at portal.contraforce.com, grant the core ContraForce app consents, and deploy your modules. Once your organization is set up, add and manage users at any time from Settings.
Add at least one Org Admin early. This ensures you always have full access to manage users, groups, and workspaces.

​
Adding and Managing Users

You add and manage users through the Settings page. User and group management is handled entirely within the ContraForce portal — no separate enterprise application consent is required.

​
Step 1: Access User Management

1

Open Settings

Click Settings in the navigation menu
2

Select User Management

Click the User Management tab
3

View Current Users

The user list displays all users with access to ContraForce
Settings, User Management tab

​
Step 2: Add New Users

1

Click Add User

Click the Add User button in the top right corner
2

Search for User

Search for the user by name or email in the Entra ID directory
3

Select User

Click the user to select them
4

Assign Roles

Choose organizational and workspace roles
5

Save

Click Add to complete the process
Invite people to the organization dialog
The Add User button only appears if your account has User Admin or Org Admin permissions.

​
Understanding Role Types

​
Organizational Roles

Organizational roles control administrative functions across your entire ContraForce instance:

​
Workspace Roles

Workspace roles control what users can do within specific customer workspaces:
Full access to all workspace features
  • View and manage all incidents
  • Run any Gamebook action
  • Manage endpoints and data connectors
  • Configure workspace settings
  • Manage workspace users
Best for: Team leads, senior analysts, workspace owners

​
User Groups

Simplify access management by organizing users into groups.

​
Benefits of Groups

Bulk Assignment

Assign workspace access to multiple users at once

Easier Management

Update group membership instead of individual users

Consistent Access

Ensure team members have the same permissions

​
Creating Groups

Groups are managed on the Group Management tab under Settings.
Settings, Group Management tab with the Add Group button
1

Navigate to Group Management

Go to Settings > Group Management
2

Create New Group

Click Add Group and enter a name
3

Add Members

Search for and add users to the group
4

Assign to Workspaces

Assign the group to workspaces with appropriate roles

​
Assigning Users to Workspaces

Users need workspace assignments to access customer data.

​
Individual Assignment

  1. Open the workspace settings
  2. Navigate to Users or Access
  3. Click Add User
  4. Select the user and assign a workspace role
  5. Save changes

​
Group Assignment

  1. Open the workspace settings
  2. Navigate to Groups or Access
  3. Click Add Group
  4. Select the group and assign a workspace role
  5. All group members inherit access
Use groups for teams that need access to the same set of workspaces. This makes onboarding new team members faster—just add them to the appropriate group.

​
Managing Existing Users

​
Viewing User Details

Click any user in the User Management list to view:
  • Assigned organizational role
  • Workspace assignments and roles
  • Group memberships
  • Last login time

​
Editing User Roles

1

Select User

Click the user in the User Management list
2

Edit Roles

Modify organizational or workspace roles as needed
3

Save Changes

Click Save to apply the new permissions

​
Removing Users

1

Select User

Click the user you want to remove
2

Click Remove

Click the Remove User or Delete button
3

Confirm

Confirm the removal when prompted
Removing a user revokes all their access to ContraForce immediately. This action cannot be undone—you’ll need to re-add the user if you want to restore access.

​
Best Practices

Assign the minimum role necessary for each user’s job function. Start with Incident Analyst and escalate to Responder or Admin only when needed.
Create groups that mirror your team structure (e.g., “Tier 1 Analysts”, “Senior Responders”). This simplifies access management as team members change.
Review user assignments quarterly to ensure former team members have been removed and current roles are still appropriate.
Maintain records of who has access to which workspaces and why. This helps with compliance audits and access reviews.
Don’t give everyone Admin access. Reserve Admin roles for users who genuinely need to manage configurations and other users.

​
Troubleshooting

​
Common Issues

User Roles Reference

Complete permissions for all roles

Workspace Center

Manage workspace settings

Enterprise Applications

Service principals and consent

Multi-Tenant Features

Managing multiple customers
Questions about user management? Contact us at support@contraforce.com.