Defining Administrator Roles

Settings (Device Control)

Change permissions and options for the user, user groups, computers, and devices that the Administrator has write privileges in the Active Directory. Can view the Media Authorizer module.

Without this role assignment, Administrator can only view the users access permissions.

Time based settings (Device Control)

Set temporary and scheduled device permissions. This function is a sub group of Settings (Device Control).

Devices (Device Control)

Add new devices to the database using Manage Devices and organize devices into groups.

Media (Device Control)

Encrypt and authorize media using the Media Authorizer module and generate the Media by User and Users by Medium reports.

This an optional function for subgroups of Settings (Device Control).

Audit (Device Control)

View and search Audit Logs and view Administrator actions, with the appropriate rights, using the Log Explorer module.

Logs (Device Control)

View central logging and access shadow files using the Log Explorer module and generating Shadowing by Device and Shadowing by User reports.

Logs without File Access (Device Control)

View central logging without access to shadow file content.

This option is a sub group of Logs (Device Control).

Key Recovery (Device Control)

Generate a passphrase for access to an encrypted device when the user has does not have a decentralized encryption password.

Can be accomplished with a lower security risk when the user is connected to the network.

Temporary Permissions Offline (Device Control)

Set only temporary permissions for users that are not connected to the Application Server and extend access permissions for a limited time.

Settings (App. Control)

View and modify user, user group, and computer Default Options for which the administrator has write permissions in the Active Directory, and authorize applications using the Authorization Wizard.

Audit (App. Control)

View and search audit logs of system activity using the Log Explorer.

Execution Logs (App. Control)

View and search execution logs using the Log Explorer for users, user groups, and computers that the administrator has write permission in the Active Directory.

Machine Scans (App. Control)

Use the Scan Explorer to scan target computers, build lists of authorized executable, script, and macro files, view scan results for computers that the administrator has write permission in the Active Directory, and create new scan templates.

Endpoint Maintenance

Create tickets to update, delete, and install clients.

Scheduled Reports

Generate custom reports at pre-scheduled intervals between start and end dates.