TRITON - Web Security Help, Version 7.7 - Websense

Delegated Administration and ReportingSuper Administrators can use the Delegated Administration > Edit Role > AddAdministrators page to specify which individuals are administrators for a role.NoteAdministrators can be added to multiple roles. Theseadministrators must choose a role during logon. In thissituation, the administrator receives the combinedreporting permissions for all roles.Delegated administrators have significant control over the Internet activities of theirmanaged clients. To ensure that this control is handled responsibly and in accordancewith your organization’s acceptable use policies, Super Administrators should use theAudit Log page to monitor changes made by administrators. See Viewing andexporting the audit log, page 384.1. If you plan to assign network accounts as delegated administrators, make sure youare logged on to the Policy Server whose Settings > General > Directory Serviceconfiguration (see Directory services, page 77) matches the TRITON Settings >User Directory configuration.If you are adding only local accounts as administrators, you can be logged on toany Policy Server.2. Under Local Accounts, mark the check box for one or more users, and then clickthe right arrow button to move the highlighted users to the Selected list.3. Under Network Accounts, mark the check box for one or more users, and thenclick the right arrow (>) button to move them to the Selected list.NoteCustom LDAP groups cannot be added as administrators.4. Set the Permissions for administrators in this role.OptionAdministrator:PolicyManagementAdministrator:ReportingAdministrator:Real-TimeMonitorAuditorDescriptionLet administrators in this role apply policies to theirmanaged clients. This also grants access to certain Websenseconfiguration settings.Grant administrators access to reporting tools. Use the EditRole page to set the specific reporting features permitted.Allow administrators to monitor Internet filtering traffic inreal time. See Real-Time Monitor, page 183.Give the administrator access to view all features availableto other administrators in the role, without the ability to savechanges.5. When you are finished making changes, click OK to return to the Edit Role page.TRITON - Web Security Help 351