Cisco Cisco Firepower Management Center 4000

Any

The Object Manager permission is available to the Access Admin, Administrator, and Network Admin 
user roles. The Object Manager permission is only available on the Defense Center.

Any

The FireAMP permission is available only to the Administrator user role. This permission is only 
available on the Defense Center.

Any

The following table lists, in order, the user role privileges required to access each option in the Health 
menu and whether the user role has access to the sub-permissions within. The Access Admin, Discovery 
Admin, Intrusion Admin, External Database User, Network Admin, and Security Approver roles have 
no permissions in the Health menu. The Health menu is only available on the Defense Center.

yes

yes

Modify Devices

yes

yes

Apply Device Changes

yes

yes

yes

yes

NAT List

yes

yes

Modify NAT Policy

yes

yes

Apply NAT Rules

yes

no

VPN

yes

yes

Modify VPN

yes

yes

Apply VPN Changes

yes

yes

Health Policy

yes

yes

no

no

Modify Health Policy

yes

yes

no

no

Apply Health Policy

yes

yes

no

no

Health Events

yes

yes

yes

yes

Modify Health Events

yes

yes

no

no