The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Permission sets and Web Control (ePO - On-prem)

Prev Next

Permission sets define rights for managed product functionality in ePO - On-prem.

Web Control adds the Endpoint Security Web Control and Endpoint Security Web Control Query permission groups to each permission set.

Permission groups define the access rights to the features. ePO - On-prem grants all permissions for all products and features to global administrators. Administrators then assign user roles to existing permission sets or create permission sets.

Your managed product adds these permission controls to ePO - On-prem.

Permissions sets

Default permissions

Executive Reviewer

Endpoint Security Web Control and Endpoint Security Web Control Query

No permissions

Global Reviewer

Endpoint Security Web Control

Views policy and task settings

Global Reviewer Endpoint Security Web Control Query

No permissions

Group Admin

Endpoint Security Web Control and Endpoint Security Web Control Query

No permissions

Group Reviewer

Endpoint Security Web Control and Endpoint Security Web Control Query

No permissions

This managed product grants No Permissions by default.

Permissions must be granted for users to access or use permission-controlled features.

Permissions required per feature

Feature

Required permissions

Automatic Responses

Automatic Responses, Event Notifications, Client Events

Client events and client rules

Systems, System Tree access, Threat Event Log

Client tasks

Endpoint Security Web Control: Tasks in the Endpoint Security Web Control permission group

Dashboards and monitors

Dashboards, Queries

Policies

Endpoint Security Web Control: Policy in the Endpoint Security Web Control permission group

Queries

Queries & Reports

Server tasks

Server Tasks

System Tree

Systems, System Tree access

Threat Event Log

Systems, System Tree access, Threat Event Log



For information about managing permission sets, see the ePO - On-prem documentation.