Package gov.nist.secauto.oscal.lib.model

Class SystemUser

  • @MetaschemaAssembly(formalName="System User",
                    description="A type of user that interacts with the system based on an associated role.",
                    name="system-user",
                    metaschema=OscalImplementationCommonMetaschema.class,
                    remarks="Permissible values to be determined closer to the application, such as by a receiving authority.")
@AllowedValues(level=ERROR,target="prop[has-oscal-namespace(\'http://csrc.nist.gov/ns/oscal\')]/@name",values={@AllowedValue(value="type",description="The type of user, such as internal, external, or general-public."),@AllowedValue(value="privilege-level",description="The user\'s privilege level within the system, such as privileged, non-privileged, no-logical-access.")}) @AllowedValues(level=ERROR,target="prop[has-oscal-namespace(\'http://csrc.nist.gov/ns/oscal\') and @name=\'type\']/@value",values={@AllowedValue(value="internal",description="A user account for a person or entity that is part of the organization who owns or operates the system."),@AllowedValue(value="external",description="A user account for a person or entity that is not part of the organization who owns or operates the system."),@AllowedValue(value="general-public",description="A user of the system considered to be outside")}) @AllowedValues(level=ERROR,target="prop[has-oscal-namespace(\'http://csrc.nist.gov/ns/oscal\') and @name=\'privilege-level\']/@value",values={@AllowedValue(value="privileged",description="This role has elevated access to the system, such as a group or system administrator."),@AllowedValue(value="non-privileged",description="This role has typical user-level access to the system without elevated access."),@AllowedValue(value="no-logical-access",description="This role has no access to the system, such as a manager who approves access as part of a process.")}) @AllowedValues(level=ERROR,target="role-id",allowOthers=true,values={@AllowedValue(value="asset-owner",description="Accountable for ensuring the asset is managed in accordance with organizational policies and procedures."),@AllowedValue(value="asset-administrator",description="Responsible for administering a set of assets."),@AllowedValue(value="security-operations",description="Members of the security operations center (SOC)."),@AllowedValue(value="network-operations",description="Members of the network operations center (NOC)."),@AllowedValue(value="incident-response",description="Responsible for responding to an event that could lead to loss of, or disruption to, an organization\'s operations, services or functions."),@AllowedValue(value="help-desk",description="Responsible for providing information and support to users."),@AllowedValue(value="configuration-management",description="Responsible for the configuration management processes governing changes to the asset.")})
public class SystemUser
extends Object
    A type of user that interacts with the system based on an associated role.