How to modify a Symantec Validation Identity Protection (VIP) administrator permissions

Products

• VIP Service

Issue/Introduction

How to modify a Symantec Validation Identity Protection (VIP) administrator permissions

Resolution

VIP Administrator permissions represent the tasks and functions that an administrator is allowed to perform. 

VIP Administrator Group permissions represent the tasks and functions that members of the group are allowed to perform. An administrator automatically inherits the permissions of the group they are assigned to. Additional permissions can be manually granted to members of the group, but permissions assigned to that group cannot be removed from members without first removing them from the group. 

To modify a VIP administrator:

1. Log into your VIP Manager tenant, click Account, then click Find / Modify VIP Administrators under the links in the right panel. 
2. Search for the VIP administrator, or leave it blank to list all VIP administrators.
3. Click the Modify link within the Action column of the Search Results table next to the administrator name.
4. Update the account information, as necessary. Always click the Save button after making changes:

• To modify a first or last name or email address, type the information in the applicable fields
• To assign a credential, enter a valid credential ID in the Credential ID field
• To remove an administrator's credential ID, click the Remove credential link
• To disable an administrator, click the disable link.
• To delete an administrator, first disable the administrator, then click the delete link. (Note: Delete operations cannot be undone).
• To change the permissions for an administrator, click the Modify link, then add additional permissions or deselect current permissions, as needed:
  
  

  ADMINISTRATOR PERMISSION	DEFINITION	HELPDESK ESSENTIAL?
  Audit Reports	Show View Audit Reports under the Reports tab. Audit reports contain all actions performed by VIP administrators, VIP APIs, VIP LDAP sync, etc.	No
  Credential Reports	Show Credential Reports under the Reports tab. Credential reports contain credential, SMS, and voice data (no user data)	No
  Export to CSV*	Allow data to be exported from VIP Manager. The Export to CSV option is available if selected.	No
  Customer Credentials	Credential View, Modify, Generate, and Create permissions. The Credentials tab is not available if no permissions are selected.	Yes
  End User Management	End-user View, Modify, and Create permission. The Users tab is not available if no permissions are selected.	Yes
  Account settings*	Change VIP account policies and security settings for users, credentials, etc.	No
  VIP Administrator Management*	View, Modify, and Create VIP administrators.	No
  Certificate Management*	Request, download, and revoke certificates for the VIP service.	No
  User Group Management*	View and modify VIP User Groups.	No
  Administrator Group Management*	View and modify VIP Administrator Groups.	No

*Sensitive permission: recommended for super VIP administrators only.