Working With Permission Sets; Creating A New Permission Set - McAfee EPOCDE-AA-BA - ePolicy Orchestrator - PC Product Manual

Working with permission sets

Permission sets can be created, deleted, modified, imported and exported as you can with many other
objects in an ePolicy Orchestrator server.
Tasks
• Creating a new permission set on page 49
Providing access levels between seeing everything or nothing requires you to create a
permission set.
• Modifying an existing permission set on page 50
The permissions granted within a specific permission set can be modified at any time.
• Duplicating a permission set on page 50
Occasionally, the easiest way to create a new permission set is to duplicate an existing one
similar to what you want.
• Exporting permission sets on page 50
Once you have fully defined your permission sets, the fastest way to migrate them to other
ePolicy Orchestrator servers is to export them and import them onto other servers.
• Importing permission sets on page 51
Permission sets can take some time to configure, so exporting and importing them is a
quick way to move this configuration from one ePolicy Orchestrator server to another.
• Removing a permission set on page 51
Permission sets can be deleted when they are no longer required.
• Deleting permission sets on page 51
Use this task to delete a permission set. Only global administrators can delete permission
sets.

Creating a new permission set

Providing access levels between seeing everything or nothing requires you to create a permission set.
If you want to create a new permission set that is unlike other permission sets you have created to
this point, starting with this task is the best approach. If you want a new permission set that is similar
to another existing permission set, it is easier to duplicate that permission set and modify the duplicate.
Task
For option definitions, click ? in the interface.
1 Open the permission sets page by clicking Menu | User Management | Permission Sets.
2 Click Actions | New.
Enter a name for the new permission set.
3
ePolicy Orchestrator will not allow you to use a name that already exists. Each permission set name
must be unique.
4 If you want to immediately assign specific users to this permission set, select their user names in
the Users section.
5 If there are any Active Directory groups where you want all users from that group mapped to this
permission set, select the server from the Server Name drop-down list and click Add.
If you have added any Active Directory servers you want to remove, select them in the Active
6
Directory list box click Remove.
Click Save to create the permission set.
7
At this point, you have created the permission set but have not yet assigned permissions to it.
® ®
McAfee ePolicy Orchestrator
Setting up permission sets
Working with permission sets
4.6.0 Software Product Guide
6
49