Steps to allow access and management of SpanVA

Products

• CASB Security Advanced
• CASB Advanced Threat Protection
• CASB Audit

Issue/Introduction

• To grant access to SpanVA, the Sys Admin role must be assigned to the user.

 

Resolution

The only way to create a SpanVA is by using a SysAdmin account.  Once the account is setup you can do the following to switch the SpanVA owner to an account with a limited Access Profile.

1. Create the account you want to be the SpanVA user account as a SysAdmin.
2. Change the ownership of the configured SpanVA to the user account created in step 1.
3. Create an access profile with the following permissions
   
   select all permitted services
   
   Select all domains
4. Assign the newly created Access Profile to the account created in step 1

 

Additional Information

After provisioning the SpanVA you can also enable CloudSOC Users to login to the SpanVA UI with the SpanVA SSO Broadcom Login

https://techdocs.broadcom.com/us/en/symantec-security-software/information-security/symantec-cloudsoc/cloud/spanva-home/spanva-auth-cloudsoc/configuring-spanva-broadcom-login.html