TRITON - Web Security Help, Version 7.7 - Websense

Delegated Administration and ReportingTo switch to another role after logon, go to the Role drop-down list in the WebSecurity toolbar and select a role.Policy Management and Reporting permissionsDelegated administrators in policy management and reporting roles can be given anycombination of the following permissions:Full policy permissions allow delegated administrators to create and manage filtercomponents (including custom categories and recategorized URLs), filters(category, protocol, and limited access), policies, and exceptions (black and whitelists) for their managed clients.Filters created by delegated administrators are restricted by the Filter Lock, whichmay designate some categories and protocols as blocked and locked. Thesecategories and protocols cannot be permitted by delegated administrators.Only one administrator at a time can log on to a role with policy permissions.Therefore, if an administrator is logged on to a role to perform policy tasks, otheradministrators in the role can log on with auditing (read-only), reporting, or Real-Time Monitor permissions only. Administrators who have been assigned tomultiple roles also have the option to select a different role to manage.To switch to another role after logon, go to the Role drop-down list in the bannerand select a role.Exceptions only permissions allow delegated administrators to create andmanage exceptions for managed clients in their role. (Exceptions permit or blockURLs for specified users, regardless of which filtering policy normally governstheir Internet access.)Policies, filters, and filter components are hidden for delegated administratorswith exceptions only permissions.Reporting permissions can be granted in either of 2 general categories: report onall clients, or report on only managed clients in the role.• Any delegated administrator with reporting permissions can be given accessto the Web Security Dashboard, investigative reports, and the Settings pagesused to manage Log Server and the Log Database.• Delegated administrators with the option to report on all clients can also begiven access to presentation reports.Real-Time Monitor permissions allow administrators to monitor all Internetfiltering activity for each Policy Server associated with TRITON - Web Security.Investigative reporting permissionsAdministrators in investigative reporting roles can create investigative reports formanaged clients in their role. (Clients’ policies are managed in other roles.) They canalso use the URL Category, URL Access, and Investigate User tools.These administrators do not have access to presentation reports or Real-Time Monitor,but can optionally be allowed to view charts on the Web Security Dashboard.338 Websense Web Security Solutions