Contents

Related Topics

About Predefined Roles

Your Management Server includes many predefined administrative roles that you can use to manage your Fireboxes that are centrally managed by your Management Server. You can also define custom roles, as described in Define Roles and Role Properties.

If your device is not centrally managed, you can create user accounts on your single Firebox that use the Device Administrator, Device Monitor, and Guest Administrator roles.

For more information about how to use role-based administration on your Firebox, see Manage Users and Roles on Your Firebox.

The subsequent table shows all available predefined roles and the actions they are allowed to take.

Role Allowed actions
Branch Office VPN Administrator

View folders and devices in WSM

View device log messages

View/create device reports

Configure device network configuration, policies, and BOVPN tunnels

Rekey BOVPN tunnels for a device

Device Administrator

View and move folders and devices in WSM

View/modify folder and device management server properties

View device log messages

Define a report of any device

Set passphrases for the Device Management user accounts

Configure Reputation Enabled Defense settings

Also available for Role-Based Administration on a Firebox.

Device Monitor

View folders and devices in WSM

View device log messages and reports

View the entire configuration file for a device

View Reputation Enabled Defense settings

Also available for Role-Based Administration on a Firebox.

Guest Administrator

Connect to a device to manage the list of guest user accounts, and print vouchers, for connections to the hotspot enabled on the device.

Only available for Role-Based Administration on a Firebox.

For more information, see Configure Hotspot Settings.

Legacy admin account

View and move folders in WSM

View/modify folder and device Management Server properties

View/move devices in WSM and monitoring tools

View device log messages

View/create device reports

Set passphrases for the Device Management user accounts

View/modify device configuration file

Update device OS

Backup/restore device configuration and OS

Reboot/restart device

Configure device network configuration, Firewall Policies, QoS Settings, BOVPN tunnels, and Mobile VPN tunnels

Drop currently active device Mobile VPN user tunnels

Configure device external authentication, Firebox users and groups, WebBlocker, spamBlocker, and Quarantine Server settings

Update Gateway AV/IPS signatures

Rekey device BOVPN tunnels and Mobile VPN tunnels

Update the device feature keys

Configure Reputation Enabled Defense settings

Legacy status account

View folders in WSM

View folder and device Management Server properties

View devices in WSM and monitoring tools

View device log messages

View device reports

View device configuration file

View Reputation Enabled Defense settings

Management Server Administrator

Define devices, folders, security templates, VPN firewall policies, and customer information

Has Certificate Authority access

Define a report or view audit log messages of any user

Define a report of any device

Configure Reputation Enabled Defense settings

Management Server Monitor

View folders and devices in WSM

View role policies

View security templates

View VPN Firewall policies

View customer information

Access to Certificate Authority

View a report or view audit log messages of any user

View a report of any device

Mobile User VPN Administrator

View folders and devices in WSM

View device log messages

View/create device reports

Configure device network configuration and Mobile VPN tunnels

Drop active Mobile VPN user tunnels for a device

Define users and groups for a device

Rekey BOVPN tunnels for a device

MSS Monitor View devices in monitoring tools
Network Administrator

View folders and devices in WSM

View device log messages

View/create device reports

Configure device network configuration

Security Administrator

View folders and devices in WSM

View device log messages

View/create device reports

Configure device network configuration, policies, and QoS settings

Update Gateway AV/IPS signatures

Super Administrator

Define users, role policies, devices, folders, security templates, VPN firewall policies, and customer information

Has Certificate Authority access

Define a report or view audit log messages of any user

Define a report of any device

User Authentication Administrator

View folders and devices in WSM

View device log messages

View/create device reports

Configure device external authentication

Define users and groups for a device

User Services Administrator

View folders and devices in WSM

View device log messages

View/create device reports

Configure WebBlocker, spamBlocker, and Quarantine Server settings for a device

See Also

About Role-Based Administration

Define Roles and Role Properties

Give Us Feedback     Get Support     All Product Documentation     Technical Search