Cisco Cisco Email Security Appliance X1070 Troubleshooting Guide
ESA FAQ: What are the levels of administrative
access available on the ESA?
access available on the ESA?
Document ID: 118112
Contributed by Jerry Orona and Robert Sherwin, Cisco TAC Engineers.
Jul 31, 2014
Jul 31, 2014
Contents
Introduction
What are the levels of administrative access available on the ESA?
Related Information
What are the levels of administrative access available on the ESA?
Related Information
Introduction
This document describes the various administrative access levels, or predefined user roles, that are available
on the Email Security Appliance (ESA).
on the Email Security Appliance (ESA).
What are the levels of administrative access available on
the ESA?
the ESA?
When you create a new user account, you assign the user to a predefined or a custom user role. Each user
role contains different levels of privileges within the OS and appliance access, as follows:
role contains different levels of privileges within the OS and appliance access, as follows:
Administrators
User accounts with the Administrator role have full access to all configuration settings of
the system. However, only the admin user has access to the resetconfig and revert
commands.
the system. However, only the admin user has access to the resetconfig and revert
commands.
Operators
User accounts with the Operator role are restricted from:
Creating or editing user accounts.
•
Issuing the resetconfig command.
•
Upgrading the appliance.
•
Issuing the systemsetup command or running the System Setup Wizard.
•
Issuing the adminaccessconfig command.
•
Performing some quarantine functions (including creating, editing, deleting, and
centralizing quarantines).
centralizing quarantines).
•
Modifying LDAP server profile settings other than username and password, if
LDAP is enabled for external authentication.
LDAP is enabled for external authentication.
•
Otherwise, they have the same privileges as the Administrator role.
Read−Only
Operators
Operators
User accounts with the Read−Only Operator role have access to view configuration
information. Users with the Read−Only Operator role can make and submit changes to see
how to configure a feature, but they cannot commit them. Users with this role can manage
messages in quarantines, if access is enabled in a quarantine.
information. Users with the Read−Only Operator role can make and submit changes to see
how to configure a feature, but they cannot commit them. Users with this role can manage
messages in quarantines, if access is enabled in a quarantine.
Users with this role cannot access the following:
File system, FTP, or SCP.
•
Settings for creating, editing, deleting, or centralizing quarantines.
•