IronPort - daily management guide - AsyncOS 7.6.1

Managing Custom User Roles for Delegated Administration
8-34
Step 2 Click Add User.
Step 3 When creating the user account, select Custom Roles.
Step 4 Select Add Role.
Step 5 Enter the name for the new role.
Step 6 Submit the new user account.
Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide
Chapter 8 Common Administrative Tasks
AsyncOS displays a notification that the new user account and custom user role have been added.
Step 7 Go to the System Administration > User Roles page.
Step 8 Click on the name of the custom user role n the Custom User Roles for Delegated Administration table.
The Edit User Role page is displayed.
Step 9 Enter a description of the user role and its privileges.
Step 10 Select the user role’s access privileges. (See Assigning Access Privileges, page 8-28 for more
information on each type of access privilege.)
Step 11 Submit and commit your changes.
Updating Responsibilities for a Custom User Role
While you can assign responsibilities to custom user roles by browsing to the individual security features
using the menu at the top of the GUI, the Custom User Roles for Delegated Administration table on the
User Roles page consolidates links to all of the security features that delegated administrators can
manage in one place, with the exception of Encryption profiles. Clicking on the name of a custom user
group’s access privilege in the table displays a list of all the mail policies, content filters, active RSA
Email DLP policies, or quarantines on the appliance and displays the names of any other custom user
role that has access to them.
For example, Figure 8-23 displays a list of active RSA Email DLP policies available on an Email
Security appliance. It also lists another custom user group that has access to the DLP policies. From this
list, an administrator can select which DLP policies the delegated administrators using the DLP Policy
Manager.
Figure 8-23 DLP Policies Available for Delegated Administrators
To update a custom user role’s responsibilities:
Step 1 Go to the System Administration > User Roles page.
Step 2 Click the name of the access privilege for the custom user role you want to update.
AsyncOS displays a list of all the mail policies, content filters, DLP policies, or quarantines available
on the appliance, along with the names of any other assigned custom user roles.
OL-25138-01