Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 65 / 340

Table 11: Administrator Role Configuration Details (continued)
Your Action Function Option
Select an access option:
• Deny All —Specifies that
members of the security
administrator role cannot see
or modify any settings in the
category.
• Read All —Specifies that
members of the security
administrator role can view,
but not modify, all settings in
the category.
• Select Write All —Specifies
that members of the security
administrator role can modify
all settings in the category.
• Select Custom
Settings —Allows you to pick
and choose security
administrator privileges
(Deny, Read, or Write) for the
individual features within the
category.
Indicates the level of realm
access that you want to
allow the security
administrator role to set for
system administrators for
each major set of admin
console pages.
NOTE: This option appears
only when you enable the
Manage All admin realm
option.
Access
Delegated Resource Policies > All tab
Select an access option:
• Deny All —Specifies that
members of the administrator
role cannot see or modify any
resource policies.
• Read All —Specifies that
members of the administrator
role can view, but not modify,
all resource policies.
• Write All —Specifies that
members of the administrator
role can modify all resource
policies.
• Custom Settings —Allows you
to pick and choose
administrator privileges
(Deny, Read, or Write) for
each type of resource policy
or for individual resource
policies.
NOTE: The Web, File, SAM,
Telnet SSH, Terminal Services,
Network Connect, and Email
Client tabs are enabled only
when you select
Custom
Settings from the drop down
list.
Indicates the level of access
that you want to allow the
administrator role for each
Resource Policies submenu. Access
47 Copyright © 2010, Juniper Networks, Inc.
Chapter 6: Configuring User Roles and Administrator Roles