Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Tomer_Sole
Mentor
Mentor

R80.10 Tip Of The Day: Separate the Install Policy Permission

With R80.10 Security Management (Gateway version doesn't matter for this), you can create a custom workflow by keeping separation between the administrators who make changes, and the administrators who only install policies.

(For some of our customers, this reason alone was enough to upgrade to R80.10!)

All admins can still call "Verify Policy" in order to check for possible rule-hide-rule situations.

Permissions are enforced at the Management Server, which means that API connections will keep the same permission settings as the ones accessed through SmartConsole UI.

Create a custom Permission Profile from Manage & Settings-->Permissions & Administrators-->Permission Profiles.

Make sure to assign this permission profile to one of the administrators. Find this under Manage & Settings-->Permissions & Administrators-->Administrators.

This is how SmartConsole looks like for someone with permission to only install policy:

0 Replies

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events