This guide walks you through creating a new Qualys Vulnerability Management, Detection & Response (VMDR) user for the purpose of creating an **assets** integration.

## Required New User Options

| Option | Access Type | Purpose |
|  --- | --- | --- |
| User Role | `Reader` | Retrieve host inventory and asset tags |
| GUI | Enabled | Complete first login, change the default password, and accept the EULA |
| API | Enabled | Allow the account to call Qualys APIs |
| Asset Groups | All, or the groups to include | Control which hosts the account can retrieve |


## Configure a new user for the integration

### 1. Log in to Qualys as an administrator

An administrator in Qualys is a user assigned the **Manager**, **Unit Manager**, or **User Administrator** role. That admin can create additional users, including a dedicated service user tied to an email account that remains active even after an employee leaves the company. User Administrators cannot create other User Administrator accounts.

User management for Qualys VMDR is in the **Vulnerability Management** module.

- After logging in, open the **Vulnerability Management** (VMDR) module. In the left sidebar, click **Users**.
- In the Users interface, click **New** > **User**.
- Under **General Information** on the left, provide the required details, including First Name, Last Name, Title, Phone, Email Address, Address 1, and Country.
- In **User Role**, assign the role and access listed in [Required New User Options](#required-new-user-options) above, including the **GUI** and **API** boxes.
- Under **Asset Groups** on the left, click **Add asset groups** and select either **All** or the specific asset group(s) this integration should access.
- Click **Save** at the far right of the modal to create the user account.
- Note the new user entry. Qualys assigns a random **username**; copy it for the integration.


### 2. Complete service account registration

- The registered email receives a message with a secure one-time link to begin registration.
- Open the link, verify the account details, then complete first GUI login: change the default password and accept the EULA.
- After you log in, go to **Help** > **About** and copy the platform-specific **API server URL**. Use this value as the **Base URL** for API endpoints (not the UI login URL).


## Configuring the Integration

To configure a new Qualys integration, provide each of the values as defined below:

| Integration Parameter | Description |
|  --- | --- |
| Base URL | The platform-specific API server URL copied from **Help** > **About** in Step 2. Use this URL for API endpoints, not the UI login URL. |
| Username | The Qualys-assigned username from Step 1. |
| Secret | The password set on first GUI login in Step 2. |