Administrator Permission Profiles in smart console

[Ihenock1011]

Hi Mates,

Can I create a custom profile in Check Point (r81.10) Smart console that allows limited permissions?

Specifically, I'd like this profile to only allow the administrator to:

• Create objects.
• Assign those objects to network groups.

Is this achievable by creating a custom profile?

Thanks,

[Tal_Paz-Fridman]

You create a Custom Permission Profile that only has permissions to create objects.

The option to "Assign those objects to network groups" is more granular and not available.

[Ihenock1011]

As shown in the attached image, the Administrator profile allows editing policies under "Manage Policy." We don't want the administrator with this limited profile to have that privilege.

[the_rock]

Then change below options to whatever is appropriate.

Andy

 

[the_rock]

Hey bro,

Just do what Tal advised, you can customize everything there.

Andy