Create And Define Permission Sets; Dlp Permission Set Options - McAfee DTP-1650-MGRA - Network DLP Manager 1650 Appliance Installation Manual

5
Installing McAfee DLP Endpoint
User and permission sets
Type a user name and specify logon status, authentication type, and permission sets.
3
We recommend creating user groups related to the role, for example DLP Quarantine
Administrator.
Click Save.
4

Create and define permission sets

Permission sets are useful for defining different administrative roles in McAfee DLP Endpoint software.
Task
For option definitions, click ? in the interface.
In McAfee ePolicy Orchestrator, select Menu | User Management | Permission Sets.
1
Click New Permission Set.
2
Type a name for the set and select users.
3
Click Save.
4
In the Data Loss Prevention field for the new permission set, click Edit.
5
Select the required permissions and click Save.
6
Figure 5-4 Editing a permission set for McAfee DLP Endpoint

DLP permission set options

Permission set options are designed to give granular control over administrator roles.
Table 5-4 Option definitions
Option
User cannot view policies.
User can only generate Agent Override, Agent
Uninstall, and Agent Quarantine Release keys.
User can only view policies.
User can view and save policies.
58 McAfee Data Loss Prevention 9.2.1
The order of creating users and permission sets is not critical. If you create users first, user names
appear in the permission set form and you can attach them to the set. If you create permission sets
first, the permission set names appear in the user form and you can attach the user to them.
The order of creating users and permission sets is not critical. If you create users first, user names
appear in the permission set form and you can attach them to the set. If you create permission sets
first, the permission set names appear in the user form and you can attach the user to them.
To turn off the sensitive data redaction feature, select User can view DLP Monitor in the monitor section.
Definition
User is not a policy administrator.
User administrator role is limited to override,
uninstall, and release keys.
User can review but not edit policies.
User has full policy administrator permissions.
Installation Guide