The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Permission sets and Threat Prevention Trellix ePO - On-prem

Prev Next

Permission sets define rights for managed product functionality in Trellix ePO - On-prem.

Threat Prevention adds the Endpoint Security Threat Prevention and Endpoint Security Threat Prevention Client permission group to each permission set.

Permission groups define the access rights to the features. Trellix ePO - On-prem grants all permissions for all products and features to global administrators. Administrators then assign user roles to existing permission sets or create permission sets.

Your managed product adds these permission controls to Trellix ePO - On-prem.

Permission sets

Default permissions

Executive Reviewer

Endpoint Security Threat Prevention and Endpoint Security Threat Prevention Client

No permissions

Global Reviewer

Endpoint Security Threat Prevention

Views policy and task settings.

Global Reviewer

Endpoint Security Threat Prevention Client

No permissions

Group Admin

Endpoint Security Threat Prevention and Endpoint Security Threat Prevention Client

No permissions

Group Reviewer

Endpoint Security Threat Prevention and Endpoint Security Threat Prevention Client

No permissions

This managed product grants No Permissions by default.

Permissions must be granted for users to access or use permission-controlled features.

Permissions required per feature

Features

Required permissions

Automatic Responses

  • Automatic Responses

  • Event Notifications

  • Any feature-specific permissions depending on the feature used (such as System Tree or queries).

Client tasks

Endpoint Security Threat Prevention: Tasks in the Endpoint Security Threat Prevention permission group

Dashboards and monitors

  • Dashboards

  • Queries

Policies

Endpoint Security Threat Prevention: Policy in the Endpoint Security Threat Prevention permission group

Reporting

  • Systems

  • System Tree access

  • Threat Event Log

  • View Exploit Prevention Events in the Endpoint Security Threat Prevention Client permission group

Queries

  • Queries & Reports

  • View Queries in the Endpoint Security Threat Prevention Client permission group

Server tasks

Server Tasks

System Tree

  • Systems

  • System Tree access

Threat Event Log

  • Systems

  • System Tree access

  • Threat Event Log



For information about managing permission sets, see the Trellix ePO - On-prem documentation.