Stormshield SN series Configuration Manual page 33

The list of privileges that can be assigned in simple view are:
Privileges in simple view
Name
System
Network
Users
Firewall
Monitoring
Privileges in advanced view
Name
Logs (R)
Filter (R)
VPN (R)
Logs (W)
Filter (W)
VPN (W)
Monitoring
Content filtering
PKI
Objects
Users
Network
Routing
Maintenance
Intrusion prevention
Page 33/448
Description
Privilege to perform maintenance operations (backups,
restorations, updates, Firewall shutdown and reboot, antivirus
update, modification of antivirus update frequency and RAID-
related actions in the monitor)
Privilege to modify Object database
Privilege to modify filtering policy configuration and routing
configuration (default route, static routes and trusted networks)
Privilege to modify Users and PKI
Privilege to modify VPN configuration, Intrusion prevention (IPS)
configuration and vulnerability management
Privilege to modify configuration from Stormshield Network
Realtime Monitor and log configuration
Description
Log consultation
Filter policy consultation
VPN configuration consultation
Privilege to modify log configuration
Privilege to modify filter policy configuration
Privilege to modify VPN configuration
Privilege to modify configuration from Stormshield Network Realtime
Monitor
Privilege for URL filtering, Mail, SSL and antivirus management
Privilege to modify PKI
Privilege to modify Object database
Privilege to modify Users
Privilege to modify network configuration (interfaces, bridges, dialups,
VLANs and dynamic DNS configuration)
Privilege to modify routing (default route, static routes and trusted
networks)
Privilege to perform maintenance operations (backups, restorations,
updates, Firewall shutdown and reboot, antivirus update, modification
of antivirus update frequency and RAID-related actions in Stormshield
Network Realtime Monitor)
Privilege to modify Intrusion prevention (IPS) configuration
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
ADMINISTRATORS
Rights
modify, base,
maintenance,
object
modify, base,
filter, route
modify, base,
user, pki
modify, base,
vpn, asq, pvm
modify, base,
log,
maintenance
Rights
base, log_read
base, filter_
read
base, vpn_read
modify, base,
log
modify, base,
filter
modify, base,
vpn
modify, base,
mon_write
modify, base,
contentfilter
modify, base,
pki
modify, base,
object
modify, base,
user
modify, base,
network
modify, base,
route
modify, base,
maintenance
modify, base,
asq