Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuring System Settings > Managing administrator accounts > Administrator roles
Administrator roles
Administrator Help | TRITON AP-EMAIL | Version 8.2.x
A Super Administrator can create several delegated administrators with a variety of roles and permissions. When you create roles for delegated administrators, you specify the users or groups managed by the role along with the permissions associated with the role. Then assign an administrator to that role. An administrator may be assigned to only 1 role at a time.
* 
Note 
Managed users and user groups settings are used only for the following permissions:
*
Policies
*
Reports
*
Queues and quarantined messages
A user's view of the Email module interface is different, depending on that user's specific administrator role. For example, a user with an Auditor role can view the entire Email module interface, but that user cannot modify any settings.
By default, a new Email module-specific administrator account is an Auditor account. A Super Administrator can use the following steps to change an administrator's role:
* 
Note 
Only 1 Super Administrator may access an email appliance at a time. Subsequent Super Administrators are assigned an Auditor (or read-only) role when they access the appliance.
Add role
Click Add and use the following steps to create a new administrator role:
1.
Enter a name for the new role, along with a brief, clear description of the role.
2.
Define the users or user groups to be managed by this role:
a.
Click Add under the Managed Users and Groups table to open the Add Managed Users and Groups dialog box.
b.
Enter the email addresses of managed users or groups in 1 of the following ways:
*
Browse to an email address file, a text file that contains 1 email address per line and is no larger than 10 MB.
*
Enter the desired email addresses in the User email address box, separating addresses by a semicolon.
3.
Define the permissions you want for this role in the Permissions table. The following options are available:
Module
Permission Options
Policy
Read-only access to all policies
Management
Policies for users managed by this role
All policies
System Settings and Status (includes access to the System Log, the Alerts page, the Message Queues page, and all Settings tab menu items except Administrators)
None
Read-only access
Management
Real-Time Monitor
None
Read-only access
Message Logs (includes access to the Message, Connection, and Email Hybrid Service logs)
None
Read-only access to all message logs
Manage message logs for users managed by this role
Manage all message logs
Audit and Console Logs (includes access to the Audit, Console, and Personal Email Manager logs)
None
Access to logs
Administrators
None
Read-only access
Management
Reports
None
Reports for users managed by this role
Access to all reports
Queues and quarantined messages
Queue access (None, Access to all queues, Access to selected queues)
Manage all quarantined messages
Manage messages for users managed by this role
Read-only access to all quarantined messages
4.
Click Assign Role to open the Assign Role dialog box.
5.
Select the administrator to which you want to assign this role. This role replaces the administrator's current role.
6.
Click OK.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuring System Settings > Managing administrator accounts > Administrator roles
Copyright 2016 Forcepoint LLC. All rights reserved.