OfficeScan 10 Administrator's Guide - Online Help Home - Trend Micro

Trend Micro OfficeScan 10 Service Pack 1 Administrator’s Guide
Role-based Administration
8-2
Use the role-based administration feature to grant and control access to OfficeScan Web
console menu and submenu items. If there are multiple OfficeScan administrators in
your organization, this feature helps you delegate server management tasks to the
administrators and manage the menu items accessible to each administrator. In addition,
you can grant non-administrators "view only" access to the Web console.
Role-based administration involves the following tasks:
1. Define user roles.
2. Configure user accounts and assign a particular role to each user.
View Web console activities for all users from the system event logs. The following
activities are logged:
• Logging on to the console
• Password modification
• Logging off from the console
• Session timeout (user automatically gets logged off)
User Roles
A user role determines the Web console menu items accessible to a user. OfficeScan
comes with a set of built-in user roles that you cannot modify or delete. Add custom
roles if none of the built-in roles meet your requirement. Configure each custom role to
have "view" or "configure" access to specific Web console menu items and sub-items.
All built-in and custom roles display on the User Roles list on the Web console.
Note: Access to specific OfficeScan domains on the client tree cannot be controlled for
each role. If the client tree is visible, all domains display.
The built-in roles are as follows:
Administrator
Users with the Administrator role can configure all menu items. Delegate this role to
other OfficeScan administrators or users with sufficient knowledge of OfficeScan.