Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 71

Copyright © 2010, Juniper Networks, Inc.
Table 9: Administrator Role Configuration Details (continued)
Option Function
Admin Role > General > Delegated Resource Policies > All tab
Access Indicates the level of access
that you want to allow the
administrator role for each
Resource Policies submenu.
Admin Role > General > Delegated Resource Policies > Custom Settings
Additional Sets custom access levels for
Access Policies an individual policy
Policies Provides custom access
level.
Default Options for Delegated Admins > Session Options tab
Idle Timeout Specifies the number of
(minutes) minutes an administrator
session may remain idle
before ending. The minimum
is 5 minutes. The default idle
session limit is ten minutes,
which means that if an
administrator's session is
inactive for ten minutes, the
Infranet Controller ends the
session and logs the event in
the system log (unless you
enable session timeout
warnings described below).
Max. Session Specifies the number of
Length minutes an active
(minutes) administrator session may
remain open before ending.
The minimum is 6 minutes.
The default time limit for an
administrator session is sixty
minutes, after which the
Infranet Controller ends the
session and logs the event in
the system log.
Chapter 6: Configuring User Roles and Administrator Roles
Your Action
Select Deny All to specify that members of
the administrator role cannot see or modify
any resource policies.
Select Read All to specify that members of
the administrator role can view, but not
modify, all resource policies.
Select Write All to specify that members of
the administrator role can modify all resource
policies.
Select Custom Settings to allow you to pick
and choose administrator privileges (Deny,
Read, or Write) for each type of resource
policy or for individual resource policies.
Select the access level for the policy (Deny,
Read, or Write).
Select the resource policy for which you want
to provide a custom access level, and click Add.
Enter the idle timeout duration in minutes.
Enter the session length in minutes. The default
is 300 seconds, and the minimum is six minutes.
53