TRITON - Web Security Help, Version 7.7 - Websense

Delegated Administration and ReportingAdministrators assigned to the Super Administrator role have the ability to createroles, assign administrators and managed clients to roles, and determine thepermissions for administrators in the role. Global Security Administrators can addadministrators to the Super Administrator role.Super Administrators can create 2 types of delegated administration and reportingroles:Policy management and reporting: User policies are managed by administratorsin the role. Administrators in the role can optionally also run reports.Investigative reporting: Administrators can run investigative reports showingInternet activity for only managed clients in the role. Client policies are managedin one or more other roles.Define as many additional roles as are appropriate for the organization. For example:Create a role for each department, with the department manager as administratorand the department members as managed clients.In a geographically distributed organization, create a role for each location andassign all the users at the location as managed clients of that role. Then, assign oneor more individuals at the location as administrators.Delegated administratorsTRITON - Web Security Help | Web Security Solutions | Version 7.7.xAdministrators are the individuals who can access TRITON - Web Security.Depending on their permissions, they may be able to:Log on and view some elements of the System dashboard, but take no otheractions.Access all configuration and management features of TRITON - Web Security,but save no changes.Run reports on specific groups of clients, or on all clients.Manage policies for specific groups of clients.Have full configuration access to all features of TRITON - Web Security.The specific permissions available depend on the administrator’s role type (SuperAdministrator, policy management and reporting, or investigative reporting). SeeDelegated administration roles, page 334.Global Security Administrators (like admin) define administrator accounts inTRITON Settings. These accounts may either be network logon accounts (defined in asupported directory service) or local accounts, used only to access TRITON. Once anaccount has been defined, the Global Security Administrator assigns each one a levelof logon access to one or more TRITON modules.The levels of Web Security access that can be granted to administrators are:TRITON - Web Security Help 335