Defining Access Rights
After Patch and Remediation is installed, new access right are added to the system. When creating new roles or editing existing ones, you can assign these new Patch and Remediation access rights.
To edit your roles, open the Users and Roles page (Tools > Users and Roles), select the Roles tab, and create a new role or edit an existing one.
New access rights are added when you install new modules.
Access Right |
Description |
Access |
---|---|---|
All |
|
|
Dashboard |
||
View Dashboard |
Access to view the home page dashboard. |
|
View Current Status |
Access to view the status of the server. |
|
View AV Widgets |
Access to select and view the AntiVirus Dashboard widgets. |
|
View LAC Widgets |
Access to select and view the Application Control Dashboard widgets. |
|
View PR Widgets |
Access to select and view the Patch and Remediation Dashboard widgets. |
|
View DC Widgets |
Access to select and view the Device Control Dashboard widgets. |
|
View MDM Widgets |
Access to select and view the Mobile Device Management Dashboard widgets. |
|
Jobs |
||
View Discovery Scan Jobs |
Access to view discovery scan jobs. |
|
Create Discovery Scan Jobs |
Access to create and copy discovery scan jobs |
|
View Agent Management Jobs |
Access to view agent management jobs. |
|
Create Agent Management Jobs |
Access to create and copy agent management jobs. |
|
Manage Modules via Jobs |
Access to install or uninstall agent modules using agent management jobs. |
|
Manage Jobs |
Cancel, pause, resume, delete or merge all jobs the user has access to. |
|
Export Jobs |
Export the jobs list. |
|
Vulnerabilities/Patch Content |
||
View Content |
Access to vulnerability and other content data. |
|
Manage Content |
Enable and disable vulnerabilities and other content. |
|
Export Content |
Export vulnerability and other content data list. |
|
View Content Details |
Access the detailed information for vulnerabilities and other content data. |
|
View My Custom Patch Lists |
Access to view custom patch lists that this user has created. |
|
View All Custom Patch Lists |
Access to view custom patch lists that all users have created. |
|
Manage Custom Patch Lists |
Edit, delete or copy custom patch lists that this user has access to. |
|
Logs |
||
View Application Control Event Logs |
Access to view reports containing application execution content. |
|
Manage Application Control Event Logs |
Access to create reports containing application execution content. |
|
Export Application Control Event Logs |
Access to export reports containing application execution content. |
|
View Dev Ctl Event Logs |
Access to view logs containing device usage events. |
|
Manage Dev Ctl Event Log Queries |
Access to create, edit, and delete device control log queries. |
|
Export Dev Ctl Event Logs |
Access to export logs containing device usage events. |
|
View Device Control Audit Logs |
Access to view reports containing device control audit events. |
|
Manage Device Control Audit Logs |
Access to manage reports containing device control audit events. |
|
Export Device Control Audit Logs |
Access to export reports containing device control audit events. |
|
Alerts & Centralized Quarantine |
||
View AV alerts |
Access to view AntiVirus Virus and Malware Event Alerts page. |
|
Manage AV alerts |
Access to delete AntiVirus alerts. |
|
Export AV alerts |
Access to export AntiVirus alerts. |
|
View AV Centralized Quarantine |
Access to view AntiVirus Centralized Quarantine page |
|
Manage AV Centralized Quarantine |
Access to delete and restore files from Centralized Quarantine |
|
Endpoints |
||
View Endpoints |
Access the manage endpoints all tab. |
|
Manage All Tab |
Enable and disable agents, delete endpoints, manage agent modules, and wake endpoints. |
|
Export All Tab |
Export the all tab endpoints list. |
|
Manage Remotely |
Access the remote management options available. |
|
View AV Tab |
Access the AntiVirus tab. |
|
Manage AV Tab |
Install, uninstall, enable and disable the AntiVirus module. |
|
Export AV Tab |
Export the AntiVirus tab endpoints list. |
|
View LAC Tab |
Access the Application Control tab. |
|
Manage LAC Tab |
Install, uninstall, enable and disable the Application Control module. |
|
Export LAC Tab |
Export the Application Control tab endpoints list. |
|
View PR Tab |
Access the Patch and Remediation tab. |
|
Manage PR Tab |
Install, uninstall, enable and disable the Patch and Remediation module. |
|
Export PR Tab |
Export the Patch and Remediation tab endpoints list. |
|
View DC Tab |
Access the Device Control tab. |
|
Manage DC Tab |
Install, uninstall, enable and disable the Device Control module. |
|
Export DC Tab |
Export the Device Control tab endpoints list. |
|
Download Agent Installers |
Access to the Download Agent Installers page. |
|
Manage Agent Version |
Access to the Manage Agent Version dialog. |
|
Scan Now Discover Applicable Updates |
Scan endpoints using the DAU Scan Now Dropdown/button. |
|
Scan Now Virus and Malware Scan |
Scan endpoints using the AntiVirus Scan Now Dropdown/button. |
|
Reboot Endpoints |
Reboot endpoints using the Reboot Now button. |
|
Inventory |
||
View Inventory |
View the endpoint inventory. |
|
Export Inventory |
Export the endpoint inventory list. |
|
Groups |
|
|
View Groups |
Access the groups. |
|
Manage Groups |
Add, edit, enable, disable, and delete groups. |
|
Export Groups |
Export the groups list. |
|
Users |
||
View Users |
Access the user groups. |
|
Manage Users |
Add or remove users from individual user policies. |
|
Export Users |
Export the user groups list. |
|
Deployments and Tasks |
||
Create Deployments |
Ability to create new deployments. |
|
View My Deployments and Tasks |
Access the deployments and tasks that this user has created. |
|
View All Deployments |
Access the deployments that all users have created. |
|
View All Virus and Malware scan tasks |
Access the Virus and Malware Scan Now tasks that all users have created. |
|
Manage Deployments and Tasks |
Deploy, enable, disable, abort, and delete deployments and tasks that this user has access to. |
|
Export Deployments and Tasks |
Export the deployments and tasks in the list that this user has access to. |
|
Packages |
||
View Packages |
Access the package data. |
|
Manage Packages |
Create, edit, and delete packages. |
|
Export Packages |
Export the package data list. |
|
Cache Packages |
Ability to download packages from the GSS onto the local machine. |
|
Agent Policy Sets |
|
|
View All Agent Policy Sets |
Access the agent policy sets. |
|
Manage All Agent Policy Sets |
Create, edit and delete agent policy sets. |
|
Export All Agent Policy Sets |
Export the agent policy sets list. |
|
AntiVirus Policies |
||
View centralized AV Policies |
View AntiVirus policies centrally. |
|
Manage centralized AV Policies |
Create, edit, enable, disable, and delete centralized AntiVirus policies. |
|
Assign and remove centralized AV Policies |
Assign and remove centralized AntiVirus policies. |
|
Export centralized AV Policies |
Export centralized AntiVirus policy list. |
|
View Group/Endpoint AV Policies |
View AntiVirus policies at user-assigned groups and endpoints. |
|
Manage Group/ Endpoint AV Policies |
Create, edit, enable, disable, and delete AntiVirus policies from user-assigned groups and endpoints. |
|
Assign Group/Endpoint AV Policies |
Assign and remove AntiVirus policies from user- assigned groups and endpoints. |
|
Export Group/Endpoint AV Policies |
Export AntiVirus policy lists for user-assigned groups and endpoints. |
|
Application Control Policies |
||
View Group/Endpoint/ Users AC Policies |
View Application Control policies in the context of groups, endpoints, and users. |
|
Manage Group/ Endpoint AC Policies |
Create Application Control policies in the context of groups and endpoints. |
|
Assign Group/Endpoint AC Policies |
Assign and unassign Application Control policies in the context of groups and endpoints (unassign only for users). |
|
Export Group/Endpoint/ Users AC Policies |
Export Application Control policy lists in the context of groups, endpoints, and users. |
|
View Centralized AC Policies |
View Application Control policies centrally. |
|
Manage Centralized AC Policies |
Create, edit, enable, disable, copy, and delete centralized Application Control policies. |
|
Assign Centralized AC Policies |
Assign and remove centralized Application Control policies. |
|
Export Centralized AC Policies |
Export centralized Application Control policy list. |
|
Device Control Policies |
||
View Group/Endpoint/ User DC Policies |
View Device Control policies in the context of groups, endpoints, and users. |
|
Manage Group/ Endpoint/User DC Policies |
Create Device Control policies in the context of groups, endpoints, and users. |
|
Assign Group/ Endpoint/User DC Policies |
Assign and unassign Device Control policies in the context of groups, endpoints, and users. |
|
Export Group/Endpoint/ User DC Policies |
Export Device Control policy list in the context of groups, endpoints, and users. |
|
View Centralized DC Policies |
View Device Control policies in Manage > Device Control Policies. |
|
Manage Centralized DC Policies |
Create, edit, enable, disable, and delete Device Control policies in Manage > Device Control Policies. |
|
Assign Centralized DC Policies |
Assign and unassign Device Control policies in Manage > Device Control Policies. |
|
Export Centralized DC Policies |
Export Device Control policy list in Manage > Device Control Policies. |
|
Mobile Policies |
||
View Group/Endpoint/ User Mobile Policies |
View MDM policies in the context of groups, endpoints, and users. |
|
Manage Group/Endpoint/User Mobile Policies |
Create MDM policies in the context of groups, endpoints, and users. |
|
Assign Group/Endpoint/User Mobile Policies |
Assign and unassign MDM policies in the context of groups, endpoints, and users. |
|
Export Group/Endpoint/ User Mobile Policies |
Export MDM policy list in the context of groups, endpoints, and users. |
|
Application Library |
||
View Application Library |
Access to view the application library page. |
|
Manage Application Library |
Access to create, edit, move, delete, assign and remove applications / application groups. |
|
Export Application Library |
Access to export application information from application library. |
|
Security Configuration Management |
||
View SCM Data |
Access to view SCM data on the endpoint detail and groups views. |
|
Reports |
||
Reports Administer |
Generate reports regardless of access rights for groups and endpoints. |
|
View My Core Reports |
Generate core reports only for those items this user has access to. |
|
View My AV Reports |
Generate AntiVirus reports only for those items this user has access to. |
|
View My PR Reports |
Generate Patch and Remediation reports only for those items this user has access to. |
|
View My LAC Reports |
Generate Application Control reports only for those items this user has access to. |
|
View My PM Reports |
Generate PM reports only for those items this user has access to. |
|
View My DC Reports |
Generate Device Control reports only for those items this user has access to. |
|
Export Reports |
Export the generated reports. |
|
Configure Enterprise Reporting (ER) |
Configure settings to manage Configure Enterprise Reporting (ER) |
|
Users/Roles |
||
View Users |
Access the users and roles list view. |
|
Manage Users |
Create, delete, enable, and disable users and roles. |
|
Export Users |
Export the users and roles list. |
|
Change Password |
Ability to change the password for users other than themselves. |
|
Manage Server Modules |
|
|
Installation Manager |
Access the Installation Manager to install, update and uninstall server modules. |
|
Subscriptions |
|
|
View Subscription |
Access the subscription service information. |
|
Manage Subscription |
Edit or update subscription service updates. |
|
Export Subscription |
Export the subscription service information. |
|
Directory/Computer Synchronization |
||
View Directory Sync Schedule |
Access to view the active directory sync schedule page. |
|
Manage Directory Sync Schedule |
Create, edit, delete, enable, disable directory syncs. |
|
Export Directory Sync Schedule |
Export the directory sync schedule lists. |
|
Device Control Tools and Options |
||
Recover Password |
Access the Tools > Device Control > Recover Password function. |
|
Grant Temporary Permissions |
Access the Tools > Device Control > Grant Temporary Permissions function. |
|
Email notifications |
||
View Email Notifications |
Access the email notifications page. |
|
Manage Email Notifications |
Create and edit email notifications and settings for core feature. Note: All types of notifications may be deleted with this right. |
|
Manage AV Email Notifications |
Create and edit AntiVirus email notifications and settings. |
|
Manage PR Email Notifications |
Create and edit Patch and Remediation email notifications and settings. Note: All types of notifications may be deleted with this right. |
|
Export Email Notifications |
Export the emails notifications list. |
|
Options |
||
View Options |
Access to general, agent and deployment default server options. |
|
Manage Options |
Set and edit general, agent and deployment default server options. |
|
Export Options |
Export the options list. |
|
View Global DC Options |
View Device Control tab of the Tools > Options page. |
|
Manage Global DC Options |
Manage the settings on the Device Control tab of the Tools > Options page. |
|
View MDM Options |
View Mobile Mgmt tab of the Tools > Options page. |
|
Manage MDM Options |
Manage the settings on the Mobile Mgmt tab of the Tools > Options page. |
|
Technical Support |
|
|
View Technical Support |
Access the technical product support information. |
|
Export Technical Support |
Export the technical product support information. |
|
Licenses |
||
View Licenses |
Access the product licenses. |
|
Manage Licenses |
Update product licenses. |
|
Export Licenses |
Export the product license information. |
|
Device Library |
|
|
View DC Library |
Access to view the Device Control library. |
|
Manage DC Library |
Access to create, edit, move, delete, and assign Device Control Library collections. |
|
Export DC Library |
Access to export Device Control information from library. |
|