Permission sets define rights for managed product functionality in ePO - On-prem.
Firewall adds the Endpoint Security Firewall, Endpoint Security Firewall Catalog, and Endpoint Security Firewall Client permission groups to each permission set.
Permission groups define the access rights to the features. ePO - On-prem grants all permissions for all products and features to global administrators. Administrators then assign user roles to existing permission sets or create permission sets.
Your managed product adds these permission controls to ePO - On-prem.
Permissions sets | Default permissions |
|---|---|
Executive Reviewer Endpoint Security Firewall, Endpoint Security Firewall Catalog, and Endpoint Security Firewall Client | No permissions |
Global Reviewer Endpoint Security Firewall | Views policy and task settings. |
Global Reviewer Endpoint Security Firewall Catalog and Endpoint Security Firewall Client | No permissions |
Group Admin Endpoint Security Firewall, Endpoint Security Firewall Catalog, and Endpoint Security Firewall Client | No permissions |
Group Reviewer Endpoint Security Firewall, Endpoint Security Firewall Catalog, and Endpoint Security Firewall Client | No permissions |
This managed product grants No Permissions by default.
Permissions must be granted for users to access or use permission-controlled features.
Feature | Required permissions |
|---|---|
Automatic Responses | Automatic Responses, Event Notifications, Client Events |
Client events and client rules | Systems, System Tree access, Threat Event Log General in the Endpoint Security Firewall Client permission group |
Dashboards and monitors | Dashboards, Queries |
Policies | Endpoint Security Firewall: Firewall in the Endpoint Security Firewall permission group |
Queries | Queries & Reports |
Server tasks | Server Tasks |
System Tree | Systems, System Tree access |
Threat Event Log | Systems, System Tree access, Threat Event Log |
For information about managing permission sets, see the ePO - On-prem documentation.