Verifying Role-Based Access Control (RBAC) in the Symantec VIP Manager Portal
Article ID: 395416
Updated On:
Products
Issue/Introduction
This article explains how to verify if Role-Based Access Control (RBAC) is applied within the Symantec VIP Manager portal, and provides guidance on reviewing administrative roles for access control and compliance purposes.
Environment
Symantec VIP Manager
Cause
Role-Based Access Control (RBAC) is a security best practice that restricts system access based on a user's role within an organization. In Symantec VIP Manager, RBAC is implemented through administrator roles, each offering a distinct set of permissions.
Resolution
How to Verify RBAC in VIP Manager
-
Log In to VIP Manager
-
Use an account with administrative privileges.
-
Access Administrator Settings
-
Navigate to the Account tab.
-
Select Find / Modify VIP Administrators.
- Click Search button
-
-
Review Role Assignments
-
You will see a list of administrator accounts.
-
Check the Role assigned to each administrator.
-
-
Common Roles in VIP Manager
-
Super Administrator – Full access to all configuration and user settings.
-
Help Desk Administrator – Manage users and credential assignments.
-
User Administrator – Manage user information only.
-
Auditor – View access logs and audit reports.
-
Read-Only Administrator – View-only access without configuration permissions.
-
If your administrators have different roles assigned with clear separation of duties, RBAC is in effect.
Additional Information
Best Practices
-
Assign roles based on least privilege to ensure security.
-
Regularly audit administrator roles to ensure compliance with internal and external policies.
-
Maintain documentation of who has access and why.
FAQ
Q: Can I create custom roles in VIP Manager?
A: As of now, VIP Manager supports only predefined administrative roles.
Q: Where can I find an audit log of admin activity?
A: Go to Reports > View Audit Reports to review administrator actions based on specific search criteria within VIP Manager.
Feedback
