This guide walks you through creating a new Qualys Vulnerability Management, Detection & Response (VMDR) user for the purpose of creating an assets integration.

An administrator in Qualys is a user assigned the Manager, Unit Manager, or User Administrator role. That admin can create additional users, including a dedicated service user tied to an email account that remains active even after an employee leaves the company. User Administrators cannot create other User Administrator accounts.

User management for Qualys VMDR is in the Vulnerability Management module.

• After logging in, open the Vulnerability Management (VMDR) module. In the left sidebar, click Users.
• In the Users interface, click New > User.
• Under General Information on the left, provide the required details, including First Name, Last Name, Title, Phone, Email Address, Address 1, and Country.
• In User Role, assign the role and access listed in Required New User Options above, including the GUI and API boxes.
• Under Asset Groups on the left, click Add asset groups and select either All or the specific asset group(s) this integration should access.
• Click Save at the far right of the modal to create the user account.
• Note the new user entry. Qualys assigns a random username; copy it for the integration.

• The registered email receives a message with a secure one-time link to begin registration.
• Open the link, verify the account details, then complete first GUI login: change the default password and accept the EULA.
• After you log in, go to Help > About and copy the platform-specific API server URL. Use this value as the Base URL for API endpoints (not the UI login URL).

To configure a new Qualys integration, provide each of the values as defined below: