Administrator roles

Documentation | Support

Go to the table of contents

Go to the previous page

Go to the next page

View or print as PDF

Configuring System Settings > Managing administrator accounts > Administrator roles

Administrator roles

Administrator Help | Forcepoint Email Security | Version 8.4.x

A Super Administrator can create several delegated administrators with a variety of roles and permissions. When you create roles for delegated administrators, you specify the users or groups managed by the role along with the permissions associated with the role. Then assign an administrator to that role. An administrator may be assigned to only 1 role at a time.

Note

Managed users and user groups settings are used only for the following permissions:

Queues and quarantined messages

A user's view of the Email Security module interface is different, depending on that user's specific administrator role. For example, a user with an Auditor role can view the entire Email Security module interface, but that user cannot modify any settings.

By default, a new Email Security module-specific administrator account is an Auditor account. A Super Administrator can use the following steps to change an administrator's role:


	Note Only 1 Super Administrator may access an email appliance at a time. Subsequent Super Administrators are assigned an Auditor (or read-only) role when they access the appliance.

Click Add and use the following steps to create a new administrator role:

1.

Enter a name for the new role, along with a brief, clear description of the role.

2.

Define the users or user groups to be managed by this role:

a.

Click Add under the Managed Users and Groups table to open the Add Managed Users and Groups dialog box.

b.

Enter the email addresses of managed users or groups in 1 of the following ways:

Browse to an email address file, a text file that contains 1 email address per line and is no larger than 10 MB.

Enter the desired email addresses in the User email address box, separating addresses by a semicolon.

3.

Define the permissions you want for this role in the Permissions table. The following options are available:


Module	Permission Options
Policy	Read-only access to all policies Management Policies for users managed by this role All policies
System Settings and Status (includes access to the System Log, the Alerts page, the Message Queues page, and all Settings tab menu items except Administrators)	None Read-only access Management
Real-Time Monitor	None Read-only access
Message Logs (includes access to the Message, Connection, and Email Hybrid Service logs)	None Read-only access to all message logs Manage message logs for users managed by this role Manage all message logs
Audit and Console Logs (includes access to the Audit, Console, and Personal Email Manager logs)	None Access to logs
Always Block/Permit lists	None Read-only access Management
Administrators	None Read-only access Management
Reports	None Reports for users managed by this role Access to all reports
Queues and quarantined messages	Queue access (None, Access to all queues, Access to selected queues) Manage all quarantined messages Manage messages for users managed by this role Read-only access to all quarantined messages

4.

Click Assign Role to open the Assign Role dialog box.

5.

Select the administrator to which you want to assign this role. This role replaces the administrator's current role.

6.

Go to the table of contents

Go to the previous page

Go to the next page

View or print as PDF

Configuring System Settings > Managing administrator accounts > Administrator roles

Copyright 2017 Forcepoint. All rights reserved.