About Epolicy Orchestrator Roles - McAfee EPOLICY ORCHESTRATOR 3.6 - WALKTHROUGH GUIDE Manual

®
ePolicy Orchestrator 3.6 Walkthrough Guide

About ePolicy Orchestrator roles

Lost&Found groups
Lost&Found groups store system names whose locations could not be determined by
the ePolicy Orchestrator server. The administrator (with appropriate rights) must move
the systems in Lost&Found groups to the appropriate place in the Directory to manage
them. Each site has a Lost&Found group, and the Directory has a global Lost&Found
group.
Inheritance
Inheritance is an important property that makes policy administration simpler. Because
of inheritance, child nodes in the Directory hierarchy inherit policies that have been set
at their parent nodes. For example:
Policies set at the Directory level are inherited by sites.
Site policies are inherited by groups and individual systems within that site.
Group policies are inherited by sub-groups or individual systems within that group.
Inheritance is enabled by default for all sites, groups and individual systems that you
add to your Directory. This allows you to set policies and schedule scan tasks in fewer
places.
However, inheritance can be turned off at any location of the Directory to allow for
customization.
Let inheritance do the work for you. While you can assign security policies and
schedule client on-demand scans or DAT file update tasks at any node of the
Note
Directory, consider setting policies at the highest-level node possible. If you do, you'll
have fewer changes to make. Avoid setting policies at the individual system level if
possible.
If you plan to have multiple people administer ePolicy Orchestrator in your environment,
you can create multiple user accounts in the console. Fellow administrators can use
these accounts to log onto the server.
The different types of user accounts include:
Global administrator.
Site administrators on page
Global reviewers on page
Site reviewers on page 21.
Global administrator
Global administrators have read and write permissions and rights to all operations.
When you install the server and console, a global administrator account with the user
name is created.
admin
You can create additional global administrator accounts for other people who need
global administrative rights to all aspects of the console.
ePolicy Orchestrator Directory: concepts and roles
20.
21.
19
Organizing the Directory and Repositories
3