Creating and managing customized roles

Products

• Endpoint Protection

Issue/Introduction

Custom roles can be created from an Endpoint Console Super Administrator account (ECSA) on Symantec Endpoint Security (SES) 

Environment

SEP 15

Resolution

An Endpoint Console Super Administrator can create custom roles. To create a custom role select which administrators can assign the role to.

Creating a custom role

To create a new role

1. Go to Endpoint > Settings > Administrators and Roles.

2. On the Roles tab, press Create Role, enter a name and description for the new role, and then press Submit.

3. On the role details page, check the privileges to associate with the role.

   Selecting privileges for your role

4. Press Save Role.

Selecting privileges for your role

The differences between each role are the privileges that are enabled. When anew role is created or duplicate role on an existing role, privileges to be selected to enable.

The privileges that are enabled for each default role are noted next to each privilege.

 

• Endpoint Console Super Administrator: ECSA

• Endpoint Console Domain Administrator: ECDA

• Limited Administrator: LA

• Viewer: SV

See Default administrator roles in the cloud console

Table: List of available privileges

Cloud console feature	Privilege and associated role
Devices Group management	Create and edit ECSA, ECDA, LA Delete ECSA, ECDA
Alerts and Events Alerts and events rule management	View alerts and events
Policy Management Policy management Policy targeting Policy group management	Create and edit policies ECSA, ECDA, LA Delete policies ECSA, ECDA Apply policies ECSA, ECDA, LA View policies Target on asset groups Create and edit policy groups ECSA, ECDA, LA Delete policy groups ECSA, ECDA
Settings Symantec Endpoint Protection Manager enrollment (14.2 only)	Enroll or unenroll domains ECSA, ECDA (only enrollment)

Editing privileges that are associated with a role

An Endpoint Console Super Administrator can edit any custom role.

To edit privileges that are associated with a role

1. Go to Endpoint > Settings > Administrators and Roles.

2. On the Roles tab, select the name of the custom role you want to edit.

   You cannot edit a default role, but you can duplicate it and then edit the duplicate, which becomes a new custom role.

3. On the role details page, check or uncheck each privilege that you want to enable or disable.

4. Press Save Role.

More Information

Default administrator roles in the cloud console