topic Re: Administrator Permission Profiles in smart console in General Topics

Administrator Permission Profiles in smart console

Ihenock1011 — Wed, 24 Apr 2024 09:08:28 GMT

Hi Mates,

Can I create a custom profile in Check Point (r81.10) Smart console that allows limited permissions?

Specifically, I'd like this profile to only allow the administrator to:

Create objects.
Assign those objects to network groups.

Is this achievable by creating a custom profile?

Thanks,

Re: Administrator Permission Profiles in smart console

Tal_Paz-Fridman — Wed, 24 Apr 2024 11:50:07 GMT

You create a Custom Permission Profile that only has permissions to create objects.

The option to "Assign those objects to network groups" is more granular and not available.

Re: Administrator Permission Profiles in smart console

the_rock — Wed, 24 Apr 2024 11:59:22 GMT

Hey bro,

Just do what Tal advised, you can customize everything there.

Andy

Re: Administrator Permission Profiles in smart console

Ihenock1011 — Wed, 24 Apr 2024 12:01:49 GMT

As shown in the attached image, the Administrator profile allows editing policies under "Manage Policy." We don't want the administrator with this limited profile to have that privilege.

Re: Administrator Permission Profiles in smart console

the_rock — Wed, 24 Apr 2024 12:06:41 GMT

Then change below options to whatever is appropriate.

Andy