Barracuda Networks SSL VPN, Руководство администратора

Страница: 59 / 124

Access Control 59
Access Rights
Access Rights are essential in creating a well organized system. As mentioned earlier, the Super User
should only be used to perform configuration of the system. From then on the Super User should
create 'Management Users' who are responsible for the daily uptake of the management and running
of the system.
An Access Right allows the Super User to delegate an area of responsibilities to a Policy. Nearly all
areas of the system can be delegated to different Policies.
All areas that can be managed are divided into their respective areas:
• Resource Rights : Items that can be managed in this area are all Resources such as Web
Forwards, Profiles and Network Places can all have their create, edit and delete actions
delegated out to a Policy.
• System Rights : Items that can be managed in this area that can be delegated are all system
resources such as Policies, SSL certificates, Authentication Schemes, Accounts and Reporting.
• Personal Rights : Items that can be managed from the Manage Account interface are all
personal resources such as Profiles, passwords, personal details, Favorites and Attributes.
The Access Rights interface summarizes the currently available permissions. The main page provides
information on the resource permissions currently available.