When you install the Endpoint Security Manager (ESM)
Console, you specify the administrative account and type of authentication
the administrator will use to access the console. The ESM Console
can authenticate users defined on the local ESM Console server or
by using domain accounts (including groups and organizational units)
defined in Active Directory (AD). After installation, you can change
the authentication mode, customize roles with access privileges,
and assign those roles to administrative accounts.