Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 70

NSM Infranet Controller Configuration Guide
52
Table 9: Administrator Role Configuration Details (continued)
Option Function
Allow Allows the security
Add/Delete administrator the ability to
admin roles create administrator roles,
even if the security
administrator is not part of
the Administrators role.
Access Indicates the level of access
that you want to allow the
security administrator role to
set for system
administrators.
Admin Role > General > Delegated Administrator Settings > Management of Admin
realms
Manage ALL Manages all admin realms.
admin realms
Allow Allows the security
Add/Delete administrator to create and
admin realms delete administrator realms,
even if the security
administrator is not part of
the administrators role.
Access Indicates the level of realm
access that you want to
allow the security
administrator role to set for
system administrators for
each major set of admin
console pages.
Your Action
Select to allow the security administrator to
add and delete admin roles.
Select Deny All to specify that members of
the security administrator role cannot see or
modify any settings in the category.
Select Read All to specify that members of
the security administrator role can view, but
not modify, all settings in the category.
Select Write All to specify that members of
the security administrator role can modify all
settings in the category.
Select Custom Settings to allow you to pick
and choose security administrator privileges
(Deny, Read, or Write) for the individual
features within the category.
Select to manage all the admin realms.
Select to allow the security administrator to
add and delete admin realms.
Select Deny All to specify that members of
the security administrator role cannot see or
modify any settings in the category.
Select Read All to specify that members of
the security administrator role can view, but
not modify, all settings in the category.
Select Write All to specify that members of
the security administrator role can modify all
settings in the category.
Select Custom Settings to allow you to pick
and choose security administrator privileges
(Deny, Read, or Write) for the individual
features within the category.
NOTE: All administrators that can manage
admin roles and realms have at least read-only
access to the admin role's Name and
Description and to the realm's Name and
Description, as displayed on the General page.
Copyright © 2010, Juniper Networks, Inc.