This guide covers the issues Interno users hit most often, and how to resolve them. Most "I can't see it" and "I can't do it" problems come down to one of two things: a missing permission scope, or an organisation that has not ingested any data yet.
The Interno sidebar contains, in order:
| Entry | Sub-entries |
|---|---|
| ZIN Advisor | — (cloud platform only; not shown on-premises) |
| Dashboard | — |
| Assets | Asset Inventory, Manual Ingestion, Query Library |
| Risk Register | — |
| Reports | — |
| Admin | Integrations, Management, Settings |
If what you are looking for is not where you expect it, check this list first — Asset Inventory and Query Library both live under Assets, not at the top level.
Interno permission scopes mostly use the defence: prefix. A user without the scope for a page sees an Unauthorized screen instead of the page.
| Symptom | Fix |
|---|---|
| SSO login fails | Confirm your identity provider session is active. Sign out and back in, or contact your IT administrator. |
| A section shows an Unauthorized screen | Your group lacks that section's scope. See Interno: Roles & Permissions Reference. |
| Risk Register will not open | Add defence:risk:view. The Create Risk button additionally needs defence:risk:create, and opening a risk to work through its steps needs defence:risk:manage. |
| Every Interno page shows Unauthorized | Your account holds no permissions at all. Ask your administrator to add you to a group. |
| I was signed out with "Session Expired!" | Interno signs you out after 15 minutes without activity. Sign in again. |
| A banner says "You are currently offline." | Your browser has lost its network connection. Reconnect and reload. |
| Query Library is empty or Unauthorized | Each tab is gated separately — Widget needs defence:widget:view, Evidence needs grc:evidence:view, Alert needs defence:query:view. Without any of the three, the whole page is Unauthorized. |
| Can view dashboards but cannot build widgets | Building a widget needs defence:widget:create. Changing a dashboard's contents needs defence:dashboard:update. |
| Cannot connect an integration | Add defence:integration:credentials:create alongside defence:integration:view. The same scope also governs editing a credential, starting a scan and activating or deactivating an integration. |
| Cannot delete an integration | Deleting needs defence:integration:credentials:delete, which is separate from create. |
| A tool's panel shows an Unauthorized image instead of its credentials | Seeing saved credentials needs defence:integration:credentials:view. |
Some actions are shown by one scope but performed under another. If a menu item is visible but the action fails, this is usually why.
| Action | Scope that shows the button | Scope the action actually needs |
|---|---|---|
| Edit an alert or evidence query | defence:query:create | defence:query:update |
| Preview an evidence query | none — always shown | defence:query:execute |
| Trigger an alert | none — always shown | defence:query:execute |
| Create an evidence query | grc:evidence:create | grc:evidence:create and defence:query:create for the builder |
Until your organisation has ingested any data, Interno deliberately limits the sidebar to the four things you need in order to get data in: Integrations, Management, Manual Ingestion and Settings. Everything else is greyed out.
The fix is to connect an integration under Admin → Integrations, or to upload a file through Assets → Manual Ingestion. Once data lands, the rest of the sidebar becomes usable.
| Symptom | Fix |
|---|---|
| Integration will not save because of the name | The integration Name may contain only letters, digits, and . _ - — no spaces or other symbols — and is capped at 100 characters. The message reads: "Name may contain only letters, digits, and . _ - (no spaces)." |
| I need to rename an integration | You cannot. The Name is fixed at creation; the field is disabled when you edit, with the note "This name can't be changed once the integration is added." An attempted rename is rejected with "Credential name cannot be changed after creation." To change the name, delete the integration and create it again. |
| I want to change a credential without recreating the integration | Open the integration card's action menu and click Edit. The full form reopens with your saved values. |
| The password/token fields are blank when I edit | That is intended. Secret fields are never shown back to you and are labelled "(leave blank to keep current)". Leave them blank and the stored secret is kept; type a new value only for the secret you want to replace. |
| Editing an AWS integration used to break the screen | Fixed. Saved multi-select values, such as the AWS services to scan or exclude, now prefill correctly when you reopen the form. |
| I saved an integration and nothing seems to happen | Saving starts the first scan immediately. Open the tool's card, click Scan Information on the credential and check the status. |
| A scan shows Failed | Open Scan Information and hover the Failed chip to read the error. Check the credentials, and confirm the external tool allows API access from Zeron. Correct them with Edit, then use Start Scan. |
| Saving says "Credential already exist with this name" | Another credential for the same tool uses that name, ignoring capitals. Choose a different name. |
| Start Scan says "A scan is already in progress for this credential" | Wait for the running scan to finish. |
| Automatic scans stopped for one integration | It is deactivated, or its last three scans all failed. Fix the cause and run one successful scan by hand. |
| A tool I need is not in the catalogue | You see only the tools Zeron has made available to your organisation. Contact your Zeron representative. |
| Creating or reactivating an integration fails with a limit message | Some plans cap how many integrations can be active at once. The error reads "Integration limit reached (x/y). Please upgrade your plan to enable more integrations." Deactivate an integration you no longer need, or contact Zeron about your plan. |
| Dashboard shows no data | Connect at least one integration and let the first sync finish. |
| Asset Inventory is empty | Assets come from connected integrations. Confirm a connector is syncing, or use Manual Ingestion. |
| Manual Ingestion is not available | Viewing needs defence:manual-ingest:view, uploading needs defence:manual-ingest:create, and approving an import needs defence:manual-ingest:review. All three also need defence:query:execute. |
| Manual Ingestion refuses my file with "Filetype not supported" | Only .xlsx workbooks are stored, even though the upload area lets you pick .xls. Re-save as .xlsx. |
| Manual Ingestion says "Invalid Excel file: Missing required columns" | A template column was removed or renamed. Start again from a freshly downloaded template. |
| An upload says "File size is too large" | Uploads are limited to 10 MB per file. |
| My Asset Inventory export stops at 100,000 rows | That is the limit for one export. Filter the source and export in parts. |
| Symptom | Fix |
|---|---|
| Dragging or resizing a widget crashed the page | This has been fixed. The dashboard layout editor now works normally in the shipped application. |
| The colour palette icon is missing in the Widget Builder | It is hidden for the Table and Card chart types. Switch to a chart type such as Bar. |
| The chart type list is missing Pie, Doughnut, Semi-Doughnut, Nightingale or Funnel | Those are removed when the result set exceeds 100 rows, and disabled when more than one y-axis field is selected. |
| The widget preview says "No data found!" | The query returned nothing. Check the source and the filters. |
| Symptom | Fix |
|---|---|
| Clicking a risk shows Unauthorized | Working a risk needs defence:risk:manage. |
| The last step only offers Save as Draft | Attach at least one evidence document with Upload Evidences. The button then reads Finish & Close Risk. |
| "Please upload at least one evidence document" | You marked the risk Completed with no evidence attached. |
| Finish & Close Risk saved but did not close the risk | The risk closes only when Mark Risk As is Completed. |
| Mitigation fields suddenly became required | They appear, and are required, when the Response Strategy is Mitigate. |
| Symptom | Fix |
|---|---|
| A query returns nothing | Confirm the underlying integration is connected and synced, then check the query's filters. |
| The Create Alert button is greyed out | The preview is returning more than 100 rows. The information icon explains: "You have selected more than 100 rows, make sure total number of rows is less than 100." Narrow the query. |
| Alert recipients get nothing | Check the alert's Users list. If it is empty the alert still runs, but no email is sent. |
| The alert email arrived with an empty table | Alerts email on every run, whether or not rows were returned. |
| I cannot find the "Evidences" or "Alerts" tab | The tabs are Widget, Evidence and Alert, in the singular. |
| Symptom | Fix |
|---|---|
| ZIN Advisor is not in my sidebar | The entry is present on Zeron's cloud platform. On an on-premises deployment it is not shown. |
| ZIN Advisor gives no data-driven answers | Connect at least one integration so there is data to analyse. |
| An approval dialog appeared and I do not know what to do | See How to Manage HITL Approvals and Agent Tasks. |
| I cannot search or pin my chat sessions | Neither is available. Sessions are grouped by date and can be renamed or deleted. |
Symptom: A page I used yesterday now shows Unauthorized. → Your group's scopes have changed. Ask your administrator to confirm which scopes your group holds.
Symptom: A menu item is visible but clicking it fails. → The button and the action can be governed by different scopes. See the table above.
Symptom: I do not know what a dashboard metric means. → See Interno: Metrics & Glossary.
Symptom: Something looks wrong and none of the above applies. → Note the page, the exact on-screen message, and the time it happened, and send them to support.
Need more help? Contact support@zeron.one