Granting Access to the Device Control Policies Module

When Ivanti Endpoint Security is installed, the administrator is automatically assigned rights to access all Device Control modules. Administrators can then assign rights to specific users through the Tools menu.

1. Select Tools > Users and Roles.
   The Users and Roles page opens.
   
2. Select the Roles tab.
   Step Result: The Roles tab displays.
   
3. Select the role to which you want to give access rights.
4. Click the Edit Role icon for the user to whom you want to grant permission.
   The Edit Role dialog opens.
   
5. Select the Access Rights tab.
   Step Result: The Access Rights tab displays.
   
6. Select the Device Control policy access rights that you want to apply to the role.
   1. In the Device Control Policies section, select the View Group/Endpoint/User DC Policies check box.
      The Manage Group/Endpoint/User DC Policies, Assign Group/Endpoint/User DC Policies, and Export Group/Endpoint/User DC Policies check boxes become active.
   2. [Optional] Select the Manage Group/Endpoint/User DC Policies check box.
      The user can create Device Control policies in the context of groups, endpoints, and users.
   3. [Optional] Select the Assign Group/Endpoint/User DC Policies check box.
      The user can assign and unassign Device Control policies in the context of groups, endpoints and users.
   4. [Optional] Select the Export Group/Endpoint/User DC Policies check box.
      The user can export Device Control policy lists in the context of groups, endpoints, and users .
   5. [Optional] Select the View Centralized DC Policies check box.
      The Manage Centralized DC Policies, Assign Centralized DC Policies, and Export Centralized DC Policies check boxes become active.
   6. [Optional] Select the Manage Centralized DC Policies check box.
      The user can create, edit, enable, disable, and delete Device Control policies in Manage > Device Control Policies.
   7. [Optional] Select the Assign Centralized DC Policies check box.
      The user can assign and unassign Device Control polices in Manage > Device Control Policies.
   8. [Optional] Select the Export Centralized DC Policies check box.
      The user can export the Device Control list in Manage > Device Control Policies.
7. Click OK.
   The Edit Role dialog closes.

The user is granted the specified access to the Device Control Policies module.