Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 76

NSM Infranet Controller Configuration Guide
58
Table 10: Administrator Role Configuration for Delegation (continued)
Option Function
Allow Allows the security
Add/Delete administrator to create and
admin realms delete administrator realms,
even if the security
administrator is not part of
the administrators role.
Access Indicates the level of realm
access that you want to
allow the security
administrator role to set for
system administrators for
each major set of admin
console pages (General,
Authentication Policy, and
Role Mapping.)
Delegated Resource Policies > All tab
Access Indicates the level of access
that you want to allow the
administrator role for each
Resource Policies sub-menu
Delegated Resource Policies > All (Custom Settings for Infranet Enforcer, Network
Access, and Host Enforcer)
Additional Sets custom access levels
Access Policies for an individual policy
Policies Provides custom access
level.
Your Action
Select to allow the security administrator to
add and delete admin realms.
Select Deny All to specify that members of
the security administrator role cannot see or
modify any settings in the category.
Select Read All to specify that members of
the security administrator role can view, but
not modify, all settings in the category.
Select Write All to specify that members of
the security administrator role can modify
all settings in the category.
Select Custom Settings to allow you to pick
and choose security administrator privileges
(Deny, Read, or Write) for the individual
features within the category.
NOTE: All administrators that can manage
admin roles and realms have at least read-only
access to the admin role's Name and
Description and to the realm's Name and
Description, as displayed on the General tab.
Select Deny All to specify that members of
the administrator role cannot see or modify
any resource policies.
Select Read All to specify that members of
the administrator role can view, but not
modify, all resource policies.
Select Write All to specify that members of
the administrator role can modify all
resource policies.
Select Custom Settings to allow you to pick
and choose administrator privileges (Deny,
Read, or Write) for each type of resource
policy or for individual resource policies.
Select the access level for the policy (Deny,
Read, or Write.)
Select the resource policy for which you want
to provide a custom access level, and click Add.
Copyright © 2010, Juniper Networks, Inc.