Permission sets define different administrative and reviewer roles in Trellix DLP software. You can assign permissions to view and save policies and view redacted fields, as well as assign role-based access control (RBAC).
DLP Administrators need permissions for Data Loss Prevention and DLP Help Desk Actions. Other permission sets are optional.
In ePO - On-prem select Menu → User Management → Permission Sets.
Select a predefined permission set, click New Permission Set to create a permission set, or Import to import a permission set.
In the Data Loss Prevention section, click Edit.
In the left pane, select a data protection module.
Incident Management, Operational Events, and Case Management can be activated separately. Other options automatically create predefined groups.
Edit the options and override permissions as needed.
Policy Catalog has no options to edit. If you are assigning Policy Catalog to a permission set, you can edit the sub-modules in the Policy Catalog group.
Click Save.
In the DLP Help Desk Actions section, click Edit.
Select the key or keys the administrator is allowed to generate.
The Generate global response key option becomes available when at least one other key is selected.
Click Save.