Permissions By Group - Symantec 10521146 - Network Security 7120 Administration Manual

320 User groups reference
About user groups

Permissions by group

the Network Security console. To avoid making conflicting changes on master
nodes, it is best to log into a single master node only, and make all changes
there.
This section describes the permissions in detail by group and by task:
Permissions by group
■
Permissions by task
■
Symantec Network Security grants specific sets of permissions and access to
each of the four user groups: SuperUser, Administrator, StandardUser, and
RestrictedUser. The four groups and their respective permissions are
predefined, and SuperUsers cannot modify them.
The SuperUser manages all accounts from the Network Security console by
logging into the master node, and the user database is then synchronized across
all slave nodes in a cluster.
This section describes the permissions of the user groups in detail:
SuperUsers: A user authenticated with full administrative capabilities. This
■
user is allowed to perform all administrative tasks that the Network Security
console can execute.
Administrators: A user authenticated with partial administrative
■
capabilities. This user is allowed to perform most administrative tasks, with
the exception of some advanced actions.
StandardUsers: A user authenticated with full read-only capabilities. This
■
user is allowed to view all information in the Network Security console.
RestrictedUsers: A user authenticated with partial read-only capabilities.
■
This user is allowed to view most information in the Network Security
console, with the exception of some advanced information and
network-sensitive data.
Note: If you are not a member of one of these predefined groups, you will not be
allowed access to the Network Security console at all.