Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 68

NSM Infranet Controller Configuration Guide
50
Table 9: Administrator Role Configuration Details (continued)
Option Function
Allow Restricts Infranet Controller
and resource access by
requiring client-side
certificates
Certificate Specifies the certificate field.
Field
Expected Specifies the expected value.
Value
Admin Role > General > Restrictions >Host Checker Restrictions tab
Enforce Specifies the Host Checker
policy at the role level.
Host Checker Specifies the Host Checker
policies policies.
Allow access Specifies access to the role
to the role if
Admin Role > General > Users > Roles > Delegate User Roles
Administrators Specifies whether the
can manage administrator can manage all
ALL roles roles
Access Specifies which user role
pages the delegated
administrator can manage.
Your Action
Select All users to allow users to access the
Infranet Controller or resources from any
machine.
Select Users with a trusted client certificate
to allow users to access the Infranet
Controller from a machine with a trusted
client certificate.
Enter the certificate field.
Enter the expected value.
Select Allow all users to restrict Host
Checker to be installed in order for the user
to meet the access requirement.
Select Allow users whose workstations
meet the requirements specified by the
Host Checker policies to requires that Host
Checker is running the specified Host Checker
policies in order for the user to meet the
access requirement.
Select the required Host Checker policies.
Select All of the selected policies pass to
allow access only if all the policy
requirements are met.
Select Any ONE of the selected policies pass
to allow access even if one policy
requirement is met.
Select the user roles. If you only want to allow
the administrator role to manage selected user
roles, select those roles in the Non-members
list and click Add to move it to the Members
list.
Select Write All to specify that members of
the administrator role can modify all user role
pages.
Select Custom Settings to allow you to pick
and choose administrator privileges (Deny,
Read, or Write) for the individual user role
pages.
Copyright © 2010, Juniper Networks, Inc.