Role Management Parent topic

Administration > Management Console > Role Management
Role Management allows you to add or remove roles, depending on the needs. These roles include the following:
  • Administrator—Users have complete and unrestricted access to the system. They can read and modify any settings accessible through the console including creating, deleting, and modifying user accounts. Users with Administrator rights can log into IWSVA through an SSH connection. This is the default access for new users.
  • Auditor—Users cannot make any configuration changes; they can view configurations, logs, and reports and can also change their own passwords.
  • Reports only—Users can only view the Summary pages and scheduled reports. They can generate logs and real-time report queries and change their own passwords.
  • Custom roles—These are the roles manually added with complete, read-only or no access to some or all administration domains. Users can modify or view different pages depending on the access rights assigned to their role.

Menu Items Permissions

A user role determines the web console menu items accessible to a user. A role is assigned a permission for each menu item.
Permissions determine the level of access to each menu item. The permission for a menu item can either be:
  • Full access: Allows full access to a menu item. Users can configure all settings, perform all tasks, and view data in a menu item.
  • Read-only: Only allows users to view settings, tasks, and data in a menu item.
  • No access: Hides a menu item from view.

Administration Menu Items Access

The following tables list the menu items available for administrators.
Administration Domains Menu Items
Status Monitoring
  • System Status
  • Dashboard
Policy Management
  • Application Control
  • HTTP
  • FTP
Logs
  • Log Analysis
  • Log Favorites
  • Settings
Reports
  • Reports on selected users/groups
System Administration
  • Updates
  • Notifications
  • Administrations
  • Only users using the built-in administrator account (Admin) can access User Accounts and User Roles.