Editing a local account

Security Manager Help | Web, Data, and Email Protection Solutions | July 28, 2022

Use the page Global Settings > General > Administrators to edit the access and authentication permissions for existing local accounts.

From the page Administrators, click the name of an administrator account.

The Edit Local Account page displays.

To change the name, enter a unique name up to 50 characters in the field Name.

The name must be between 1 and 50 characters long, and cannot include any of the following characters:

* < > ' { } ~ ! $ % & @ # . " | \ & + = ? / ; : ,

Names can include spaces and dashes.

To change the administrator email address, enter a valid address for the user in the field Email address.

This email address is used to send account information to the administrator.

To reset the administrator's password, enter and confirm a password in the fields Change password and Confirm password.

The password must be 8–255 characters and include at least one each of the following:

uppercase letter

lowercase letter

number

special character (such as hyphen, underscore, or blank)


	Note If certificate authentication is enabled and password authentication is disabled on the page General > Two-Factor Auth, password logon is not available for the local account.

Under Administrator type, select either User or Application. (Added in version 8.6.3)

Select User for administrator accounts that require access to the Security Manager. This is the standard type for all administrators.

Select Application if the account is used to access REST API services in the Data Security module. The Application type provides permissions to perform API requests to the Security Manager.

The Email Address provided for this account will be used as the Application owner's contact. Forcepoint DLP uses this email address if there is an issue with the Application.

If you select Application, then all module access permission options on this page are disabled. The Application type grants access to the Data module by default and grants no permissions to the other modules. These permissions cannot be edited. Also, the Notify administrator of the new account via email and Force administrator to create a new password at logon options are not available.

To give the administrator full permissions across all Security Manager modules, mark the check box Global Security Administrator.


	Note Only Global Security Administrators can create other Global Security Administrators.

To send account update information to the administrator via email, mark the check box Notify administrator of the account changes via email.


	Note Selecting this option notifies the administrator only of the current changes being made. If you return to make further edits to this or another administrator's details, you will need to mark the option again.

To require the administrator to change the account password the next time they log on to the Security Manager, mark the check box Force administrator to create a new password at logon.

If certificate authentication is enabled on the page General > Two-Factor Auth:

Click Certificate Authentication.

Browse to the location of the certificate that the administrator will authenticate against when logging on to the Security Manager.

Click Upload Certificate.

For more information, see Configuring two-factor authentication.

10.

If this is not a Global Security Administrator account, use the section Module Access Permissions to update permissions for the administrator. Choose a setting under each of the available options (Web, Data, Email) to give the administrator permissions to manage one or more of the Security Manager modules.

For each available module, choose whether the administrator has:

No access to that module

Only access to the module

Both access and the ability to manage other administrators in that module

For more information, see Security Manager administrators.


	Note Administrators can assign access permissions only for the Security Manager modules to which they have management permissions.

11.

When you are finished making changes, click OK.

The settings are saved.