Here are a few user management best practices from our Support team.
Add at least one new user account
It's recommended you add a new user account with a Manager or Unit Manager role to begin, although any user account except Contact is fine. If the subscriber account is lost or misplaced, this makes it possible for Support to reset the password for the subscriber account while retaining all saved results and configurations including user accounts.
Review password security settings
Any user with a Manager role has the ability to set advanced password security settings that apply to all users in the subscription. For example, you can allow users to define their own passwords, set password expiration, and define how many failed login attempts will lock a user's account. To set password security options, log into your Qualys Account and go to Users > Setup > Security.