Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuring System Settings > Managing administrator accounts > Administrator roles
Administrator roles
Administrator Help | Forcepoint Email Security | Version 8.5.x
A Super Administrator can create several delegated administrators with a variety of roles and permissions on the page Settings > Administrators > Roles. When creating roles for delegated administrators, you specify the users or groups managed by the role along with the permissions associated with the role, before assigning an administrator to that role. An administrator may be assigned to only one role at a time.
 
* 
Note 
Managed users and user groups settings are used only for the following permissions:
*
Policies
*
Reports
*
Queues and quarantined messages
A user's view of the Email Security module interface is different, depending on that user's specific administrator role. For example, a user with an Auditor role can view the entire Email Security module interface, but cannot modify any settings.
By default, a new Email Security module-specific administrator account is an Auditor account. A Super Administrator can use the following steps to change an administrator's role:
 
* 
Note 
Only one Super Administrator may access an email appliance at a time. Subsequent Super Administrators are assigned an Auditor (or read-only) role when they access the appliance.
Add new administrator role
1.
From the page Roles, click Add.
The Add Role page displays.
2.
In the text field Role Name, enter a name for the new role.
3.
In the text field Description, enter a brief, clear description of the role.
4.
From the Managed users and groups table, define the users or user groups to be managed by this role:
a.
Under the Managed users and groups table, click Add.
The Add Managed Users and Groups dialog box displays.
b.
Enter the email addresses of managed users or groups in one of the following ways:
*
From the field User email address file, click Browse.
The Open window displays.
*
Browse to an email address file, a text file that contains one email address per line and is no larger than 10 MB, and click Open.
The email address file is added.
*
In the field User email addresses, enter the desired email addresses, separated by semicolons.
c.
Click OK.
The user and group settings are saved and the Add Role page displays.
In the section Permissions, define the permissions for this role by selecting the appropriate buttons in the Permissions table.
The following options are available:
 
Module
Permission Options
Policy
Read-only access to all policies
Management
Policies for users managed by this role
All policies
System Settings and Status (includes access to the System Log, the Alerts page, the Message Queues page, and all Settings tab menu items except Administrators)
None
Read-only access
Management
Real-Time Monitor
None
Read-only access
Message Logs (includes access to the Message, Connection, and Email Hybrid Service logs)
None
Read-only access to all message logs
Manage message logs for users managed by this role
Manage all message logs
Audit and Console Logs (includes access to the Audit, Console, and Personal Email Manager logs)
None
Access to logs
Always Block/Permit lists
None
Read-only access
Management
Administrators
None
Read-only access
Management
Reports
None
Reports for users managed by this role
Access to all reports
Queues and quarantined messages
Queue access (None, Access to all queues, Access to selected queues)
Manage all quarantined messages
Manage messages for users managed by this role
Read-only access to all quarantined messages
1.
In the section Administrators, click Assign Role.
The Assign Role dialog box displays.
2.
Select the administrator to whom you want to assign this role.
This role replaces the administrator's current role.
3.
Click OK.
4.
From the page Add Role, click OK.
The new administrator role is saved.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuring System Settings > Managing administrator accounts > Administrator roles
Copyright 2022 Forcepoint. All rights reserved.