Creating and managing customized roles

book

Article ID: 184835

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

Custom roles can be created from an Endpoint Console Super Administrator account (ECSA) on Symantec Endpoint Security (SES) 

Environment

SEP 15

Resolution

An Endpoint Console Super Administrator can create custom roles. To create a custom role select which administrators can assign the role to.

Creating a custom role

To create a new role

  1. Go to Endpoint > Settings > Administrators and Roles.

  2. On the Roles tab, press Create Role, enter a name and description for the new role, and then press Submit.

  3. On the role details page, check the privileges to associate with the role.

    Selecting privileges for your role

  4. Press Save Role.

Selecting privileges for your role

The differences between each role are the privileges that are enabled. When anew role is created or duplicate role on an existing role, privileges to be selected to enable.

 

The privileges that are enabled for each default role are noted next to each privilege.

 

  • Endpoint Console Super Administrator: ECSA

  • Endpoint Console Domain Administrator: ECDA

  • Limited Administrator: LA

  • Viewer: SV

See Default administrator roles in the cloud console

Table: List of available privileges

Cloud console feature

Privilege and associated role

Devices

Group management

Create and edit ECSA, ECDA, LA

Delete ECSA, ECDA

Alerts and Events

Alerts and events rule management

View alerts and events

Policy Management

Policy management

Policy targeting

Policy group management

Create and edit policies ECSA, ECDA, LA

Delete policies ECSA, ECDA

Apply policies ECSA, ECDA, LA

View policies

Target on asset groups

Create and edit policy groups ECSA, ECDA, LA

Delete policy groups ECSA, ECDA

Settings

Symantec Endpoint Protection Manager enrollment (14.2 only)

Enroll or unenroll domains ECSA, ECDA (only enrollment)

Editing privileges that are associated with a role

An Endpoint Console Super Administrator can edit any custom role.

To edit privileges that are associated with a role

  1. Go to Endpoint > Settings > Administrators and Roles.

  2. On the Roles tab, select the name of the custom role you want to edit.

    You cannot edit a default role, but you can duplicate it and then edit the duplicate, which becomes a new custom role.

  3. On the role details page, check or uncheck each privilege that you want to enable or disable.

  4. Press Save Role.