Configure Administrative Users, Groups, or Organizational Units
From the SettingsAdministrationUsers page, you can view all the accounts that provide administrative access to the ESM Console. An account can be a user, a group, or an organizational unit. To provide administrative access to a group or organizational unit, the account must exist on the domain. To provide administrative access to a user, you can add either a user on the local machine or a user on the domain. The ESM Console uses the domain or the credentials defined on the local machine to authenticate the user.
As a best practice, create a separate account for each user that requires access to the ESM Console.
For each account, the ESM Console displays the account status (Blocked or Unblocked), the account Name, the assigned Role, and the date that the account was created. Selecting the row for an account will expand the row to display additional details and actions, including who created the role (System, DbConfig, or the administrative account that is logged into the ESM Console). The actions you can perform on a role vary depending on where the role was created. If you have permissions to do so, you can edit, block, unblock, or delete any account created by other administrative users but you cannot block or delete accounts that were created from DBconfig.
Blocking an account prevents that account from logging in to the ESM Console. Similarly, deleting an account removes the account and settings from the ESM Console and prevents the account from logging in to the ESM Console. When a role that is associated with an account is blocked, the ESM Console displays the Role as <role name> (inactive). When a role that is associated with an account is deleted, the ESM Console displays the Role as N/A (inactive). The ESM Console also displays blocked accounts with a red icon in the status column and indicates a deleted or blocked role with a red icon next to the Role name.
- From the ESM Console, select SettingsAdministrationUsers. The ESM Console displays
the accounts for your organization, including users, groups, and
organizational units. If you cannot log into the ESM Console, use the Database (DB) Configuration Tool to verify, and optionally change, the users and groups that have access to the ESM Console (see Configure Administrative Access to the ESM Console Using the DB Configuration Tool).
- Click Add User, Add Group, or Add Organizational Unit to create a new account. Alternatively, select the row of an existing account and click Edit to modify the account settings. From this view, you can also Block, Unblock, or Delete an account.
- Enter the Name of an existing
account. If you are using machine authentication, you can only add
existing users on the local machine. If you are using domain authentication, you
can add any existing domain user, group, or organizational unit. The ESM Console truncates usernames over 20 characters. As a result, users must log in to the ESM Console using only the first 20 characters of their username.
- Select the Is Active option to enable the account or clear the Is Active option to disable the account.
- Select the role from the list to assign access privileges to the account. To create a new role, see Configure Administrative Roles.
- Save your changes. The ESM Console displays the new or modified account in the table.
Manage Administrator Access to the ESM Console
Manage Administrator Access to the ESM Console When you install the Endpoint Security Manager (ESM) Console, you specify the administrative account and type of authentication ...
Configure Administrative Roles
Configure Administrative Roles From the Administration Roles page, you can see all the built-in and custom roles for your organization. Creating custom roles enables you ...
Administrative Users An administrative user is a local or domain user account that has access to specific administrative or reporting functions on the ESM Console. ...
Administrative Authentication When you install the ESM Console, you specify the administrative user and type of authentication that the ESM Console uses to authenticate administrative ...
Traps Endpoint Security Manager Known Issues
Known issues with the Traps Endpoint Security Manager and Traps agent 4.1. ...
Configure Administrative Access to the ESM Console Using th...
Configure Administrative Access to the ESM Console Using the DB Configuration Tool When you install the ESM Console, you specify the administrative account and type ...
Configure the Authentication Mode
Configure the Authentication Mode When you install the ESM Console, you specify the administrative account and type of authentication that administrators will use to access ...
Configure Administrative Accounts and Authentication
Configure Administrative Accounts and Authentication Configure Administrative Roles Configure Administrative Users, Groups, or Organizational Units Configure the Authentication Mode Change the Ninja-Mode Password ...
Why can’t I log in to the ESM Console?
Why can’t I log in to the ESM Console? Symptom The Endpoint Security Manager (ESM) Console displays an error message that the username or password ...