TRITON - Web Security Help, Version 7.7 - Websense

Delegated Administration and ReportingThere may also be problems if the Super Administrator is connected to a differentPolicy Server than the one that communicates with the directory service containingthe clients to be deleted. In this situation, the current Policy Server and directoryservice do not recognize the clients.An unconditional Super Administrator can assure that the appropriate clients can bedeleted, as follows.1. Open the Policy Server list in the Web Security toolbar and make sure that youare connected to the Policy Server that communicates with the appropriatedirectory. You must be logged on with unconditional Super Administratorpermissions.2. Open the Role list in the Web Security toolbar, and select the role from whichmanaged clients are to be deleted.3. Go to Policy Management > Clients to see a list of all the clients to which thedelegated administrator has explicitly assigned a policy.This may include both clients that are specifically identified on the role’smanaged clients list, and clients who are members of networks, groups, domains,or organizational units on the managed clients list.4. Delete the appropriate clients.5. Click OK to cache the changes.6. Open the Role list in the banner, and select the Super Administrator role.7. Go to Policy Management > Delegated Administration > Edit Role.8. Delete the appropriate clients from the managed clients list, and then click OK toconfirm the delete request.9. Click OK on the Edit Role page to cache the changes. Changes are notimplemented until you click Save and Deploy.Managing Super Administrator clientsTRITON - Web Security Help | Web Security Solutions | Version 7.7.xClients who are not specifically assigned to a delegated administration role aremanaged by Super Administrators. There is no Managed Clients list for the SuperAdministrator role.To apply policies to these clients, add them to the Policy Management > Clients page.See Adding a client, page 83. Clients who have not been assigned a specific policy aregoverned by the Super Administrator Default policy.There may be times when you cannot add clients to the Clients page. This can occurwhen the client is a member of a network, group, or domain (OU) that is assigned toanother role. If the administrator of the other role has applied a policy to individualmembers of the network or group, those clients cannot be added to the SuperAdministrator role.356 Websense Web Security Solutions