Defining EEFF permission sets for ePO users
In ePO, administrator rights management determines what ePO users can perform while
administering EEFF.
A permission set is a group of permissions that can be granted to users or Active Directory (AD)
groups by assigning it to those users’ accounts. One or more permission sets can be assigned
to users who are not global administrators (global administrators have all permissions to all
products and features).
User accounts and their associated permission sets in ePolicy Orchestrator define the tasks that
the users can perform. This allows you to restrict specific users or groups from misusing EEFF
features.
Contents
Creating permission sets for user accounts
Editing EEFF Policy Permissions
Editing EEFF Key Server permissions
Creating permission sets for user accounts
Use this task to create a permission set. Only global administrators can create permission sets.
Task
For option definitions, click ? in the interface.
1
Click Menu | User Management | Permission Sets | New Permission Set. The New
Permission Set page appears.
2
Type a permission set name in the Name field.
3
Select the Active Directory groups mapped to this permission set. To add a new
Active Directory group, click Add, browse to the group then click OK.
4
Select the Server name, then click Save. The new permission set page appears.
Editing EEFF Policy Permissions
Use this task to define permissions for configuring EEFF policy settings.
Task
For option definitions, click ? in the interface.
1
Click Menu | User Management | Permission Sets | New Permission Set. The New
Permission Set page appears.
McAfee Endpoint Encryption for Files and Folders version 4.0.0 Product Guide
38
