Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 67 / 340

Table 11: Administrator Role Configuration Details (continued)
Your Action Function Option
Select an access option:
• Deny All —Specifies that
members of the security
administrator role cannot see
or modify any settings in the
category.
• Read All —Specifies that
members of the security
administrator role can view,
but not modify, all settings in
the category.
• Write All —Specifies that
members of the security
administrator role can modify
all settings in the category.
• Custom Settings —Allows you
to pick and choose security
administrator privileges
(Deny, Read, or Write) for the
individual features within the
category.
NOTE: The Web, File, SAM,
Telnet SSH, and Terminal
Services tabs are enabled only
when you select
Custom
Settings from the drop down
list.
Indicate the level of access
that you want to allow the
administrator role for each
Resource Profiles. Access
Delegated Resource Profiles > Web > File > SAM > Telnet SSH > Terminal Services
Select Deny or Read or Write
access level for the type of
resource.
Allows you to pick and
choose administrator
privileges for each type of
resource profiles. Access
Select the resource profile for
which you want to provide a
custom access level, and click
Add .
Allows you to specify access
level to individual profiles
(For example, if you want to
control access to a resource
profiles that controls access
to www.google.com). Additional Access Profiles
Select Read or Write access
level for the profiles.
Allows you to pick and
choose administrator
privileges (Deny, Read, or
Write) for the profiles. Access
Related
Documentation
•
Configuring Access Options using Remote Access Mechanisms Overview on page 65
•
Configuring Secure Access General Session Options (NSM Procedure) on page 39
•
Creating and Applying a Secure Access Device Template on page 29
49 Copyright © 2010, Juniper Networks, Inc.
Chapter 6: Configuring User Roles and Administrator Roles