Organizing The Directory - McAfee EPOLICY ORCHESTRATOR 3.6 - WALKTHROUGH GUIDE Manual

®
ePolicy Orchestrator 3.6 Walkthrough Guide

Organizing the Directory

Global reviewers
Global reviewers can view, but not edit, all settings in the console (except for Rogue
System Detection), including property settings, policy, and task settings for all nodes in
the Directory. Global reviewers can also run enterprise-wide and site-specific reports.
Site reviewers
Site reviewers can only view settings and run reports for specified products within
specified sites of the Directory.
The Directory is a hierarchical tree structure that allows you to group your systems
within units called sites and groups. Grouping systems with similar properties or
requirements into these units allows you to manage policies for collections of systems
in one place, rather than having to set policies for each system separately.
As part of the planning process, consider the best way to divide systems into sites and
groups prior to building the Directory.
Sites
A site is a primary-level unit immediately under the Directory root in the console tree.
Traits of sites include:
Sites can only be created by global administrators.
A site can include both groups and systems.
Sites (and their groups and systems) are administered by a global administrator or
by a site administrator who has ownership of the specific site. (Site administrators
have administrative rights only over the sites to which ownership has been
assigned.)
Each site contains a Lost&Found group; a temporary container for systems for
which ePolicy Orchestrator wasn't able to automatically place in the correct location
within the site.
Groups
A group is a secondary-level (or subsequent level) unit of the Directory. Traits of groups
include:
Groups can be created by global administrators, or the site administrator of the site
to which the group belongs.
A group can include both groups and systems.
Groups are administered by a global administrator or by the site administrator of the
site to which the group belongs.
Groups do not contain a Lost&Found group.
ePolicy Orchestrator Directory: concepts and roles
21
Organizing the Directory and Repositories
3