Enterprise Scanner User Groups - IBM Proventia Network Enterprise Scanner User Manual

Enterprise Scanner User Groups

Introduction
All predefined user
groups
User groups for
Enterprise Scanner
Scanning without
full permissions
IBM Proventia Network Enterprise Scanner User Guide, Version 1.3
This topic describes the predefined user groups in the SiteProtector system that apply to
Enterprise Scanner users. You add Enterprise Scanner users to the SiteProtector system
and define their Enterprise Scanner permissions just as you do for any type of the
SiteProtector system user.
The SiteProtector system includes the following predefined User Groups:
Administrator
●
Analyst
●
Assessment Manager
●
Desktop Manager
●
Network Manager
●
Operator
●
Server Manager
●
The SiteProtector User Group intended specifically for Enterprise Scanner users is
Assessment Manager; however, the Administrator and Analyst groups also provide full
access to Enterprise Scanner permissions. You can assign Enterprise Scanner permissions
to other users or other groups.
To perform any Enterprise Scanner scan with SiteProtector 2.0, Service Pack 6.1
(SiteProtector DBSP 6.31 or later, a user must have permission to view the Network
Locations policy. This permission is granted for the predefined user groups that provide
full Enterprise Scanner permissions. If you define users or user groups with restricted
permissions, you must grant this permission explicitly. The way you grant permission is
based on the inheritance behavior of your policy:
If you...
do not change the inheritance
behavior of the policy
change the inheritance
behavior of the policy
Table 19: Granting permission to the Network Locations policy
Users who do not have permission to view the Network Locations policy—
Important:
either through group association or by a specific grant—cannot run Enterprise Scanner
scans. If those users try to run a scan, they receive an error message that the scan cannot be
run because a policy is not defined.
Then you...
can define the permission once at the Site level.
you must grant the permission for the group where you need the
permission and for all the groups above it in the hierarchy.
Enterprise Scanner User Groups
65