McAfee EPOCDE-AA-BA - ePolicy Orchestrator - PC, Product Manual

Page: 240 / 328

Query and report permissions
You can choose a number of ways to restrict access to queries and reports.
To run a query or report, you need permissions to not only that query or report, but the feature sets
associated with their result types. A query’s results pages will only provide access to permitted actions
given your permission sets.
Groups and permission sets control access to queries and reports. All queries and reports must belong
to a group, and access to that query or report is controlled by the permission level of the group. Query
and report groups have one of the following permission levels:
•
Private
— the group is only available to the user that created it.
•
Public
— the group is shared globally.
•
By permission set
— the group is only available to users assigned the selected permission sets.
Permission sets have four levels of access to queries or reports. These permissions include:
•
No permissions
— The
Query
or
Report
tab is not available to users with no permissions.
•
Use public queries
— Grants permission to use any queries or reports that have been placed in a
Public
group
.
•
Use public queries; create and edit personal queries
— Grants permission to use any queries or reports that
have been placed in a
Public group
, as well as the ability to use the
Query Builder
to create and edit
queries or reports in
Private groups
.
•
Edit public queries; create and edit personal queries; make personal queries public
— Grants permission to use and
edit any queries or reports placed in
Public groups
, create and edit queries or reports in
Private groups
,
as well as the ability to move queries or reports from
Private groups
to
Public
or
Shared groups
.
About queries
Queries are essentially questions you ask ePolicy Orchestrator and answers are returned in various
forms of charts and tables.
A query can be used individually to get an answer right now. Any query’s results can be exported to a
variety of formats, any of which can be downloaded or sent as an attachment to an email message.
Most queries can also be used as dashboard monitors, enabling near real-time system monitoring.
Queries can also be combined into reports, giving a more broad and systematic look at your ePolicy
Orchestrator software system.
20 Querying the database and reporting on system status
Query and report permissions
240 McAfee
®
ePolicy Orchestrator
®
4.6.0 Software Product Guide