Create administrator accounts

Delegated Administration | Web Protection Solutions | v8.4.x, v8.5.x | 29-Apr-2022

Administrator accounts for all Forcepoint Security modules are centrally created and maintained on the Global Settings > Administrators page. Global Security Administrators add accounts and grant them permission to access one or more Forcepoint Security modules. Accounts cannot be added to delegated administration roles until they have first been created in Global Settings.

To define administrator accounts with access to the Web module of the Forcepoint Security Manager:

Go to the Global Settings > Administrators page. Initially, only the admin account is listed on this page.

Click Add Local Account or Add Network Account to define an administrator account.

A local account is used only to access the Security Manager. You define the account name and password, and manually associate an email address with the account.

A network account is a user or group account defined in the directory service configured on the Global Settings > User Directory page. In order to be defined as an administrator, the user or group account must have an email attribute assigned.

Do one of the following:

Enter a User name, Email address, and Password for the local account.

Enter all or part of a user or group name in the Search box, then select one or more users or groups to add to the Selected accounts list.

Specify whether or not to Notify administrator of the new account via email. You can customize the email message sent to new administrators on the Global Settings > Notifications page.

If you are adding a local account, specify whether or not to Force administrator to create new password at logon. Local administrators can change their own password at any time on the Global Settings > My Account page.

Define the general level of Web module management access for this account.

Select Grant access to this module to provide only basic Web module access. Until the account is assigned to a role and granted delegated administrator permissions within the Web module, it can be used only to access a limited subset of the Status > Dashboard page.

Select Grant access and the ability to modify access permissions for other accounts to define the account as an unconditional Super Administrator. Once you click OK, the new administrator is given full access to all Web module features and functions.

Click OK to save your changes and create the account. The account is immediately available for configuration within the Web module.

Repeat to create additional administrators, as needed.