STIGQter STIGQter: STIG Summary: Rancher Government Solutions Multi-Cluster Manager Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 05 Jan 2026:

When allowed by the central authentication system, the default role assigned to a user must be User-Base.

DISA Rule

SV-252845r960783_rule

Vulnerability Number

V-252845

Group Title

SRG-APP-000028-CTR-000080

Rule Version

CNTR-RM-000080

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

From the GUI, navigate to Triple Bar Symbol(Global) >> Users & Authentication >> Roles.
-Click "Standard User".
-At the top right, click the three dots, and then "Edit Config".
-Under "New User Default", select "No" and click "Save".
-Click "User-Base".
-At the top right, click the three dots, and then click "Edit Config".
-Under "New User Default", select "Yes", and then click "Save".

Check Contents

Verify User-Base is the default assigned role:
-From the GUI, navigate to Triple Bar Symbol(Global) >> Users & Authentication >> Roles.
-Click "Standard User".
-At the top right, click the three dots, and then choose "Edit Config".
-Under "New User Default", ensure "No" is selected.
-Click "User-Base".
-At the top right, click the three dots, and then "Edit Config".
-Under "New User Default", ensure "Yes" is selected.

If "No" is not selected for Standard User, this is a finding.

If "Yes" is not selected for User-Base, this is a finding.

Vulnerability Number

V-252845

Documentable

False

Rule Version

CNTR-RM-000080

Severity Override Guidance

Verify User-Base is the default assigned role:
-From the GUI, navigate to Triple Bar Symbol(Global) >> Users & Authentication >> Roles.
-Click "Standard User".
-At the top right, click the three dots, and then choose "Edit Config".
-Under "New User Default", ensure "No" is selected.
-Click "User-Base".
-At the top right, click the three dots, and then "Edit Config".
-Under "New User Default", ensure "Yes" is selected.

If "No" is not selected for Standard User, this is a finding.

If "Yes" is not selected for User-Base, this is a finding.

Check Content Reference

M

Target Key

5467