Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 1212
 
33-10
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
 
Chapter 33      Distributing Administrative Tasks
  Managing Custom User Roles for Delegated Administration
No access: Delegated administrators cannot view or edit RSA Email DLP policies on the Email 
Security appliance.
View assigned, edit assigned: Delegated administrators can use the DLP Policy Manager to view 
and edit the RSA Email DLP policies assigned to the custom user role. Delegated administrators 
cannot rename or reorder DLP policies in the DLP Policy Manager. Delegated administrators can 
export DLP configurations.
View all, edit assigned: Delegated administrators can view and edit the RSA Email DLP policies 
assigned to the custom user role. They can export DLP configurations. They can also view all RSA 
Email DLP policies that are not assigned to the custom user role but they cannot edit them. 
Delegated administrators cannot reorder DLP policies in the DLP Policy Manager or rename the 
policy.
View all, edit all (full access): Delegated administrators have full access to all of the RSA Email 
DLP policies on the appliance, including the ability to create new ones. Delegated administrators 
can reorder DLP policies in the DLP Policy Manager. They cannot change the DLP mode that the 
appliance uses.
You can assign individual RSA Email DLP policies to the custom user role using either the DLP Policy 
Manager or the Custom User Roles for Delegated Administration table on the User Roles page.
 for more information on RSA Email DLP policies and the DLP 
Policy Manager.
 for information on using the Custom 
User Roles for Delegated Administration list to assign RSA Email DLP policies.
Email Reporting
The Email Reporting access privileges define which reports and Email Security Monitor pages a 
delegated administrator can view, depending on the custom user role’s access to mail policies, content 
filters, and RSA Email DLP policies. These reports are not filtered for assigned policies; delegated 
administrators can view reports for mail and DLP policies that for which they are not responsible.
You can assign one of the following access levels for email reporting to a custom user role:
No access: Delegated administrators cannot view reports on the Email Security appliance.
View relevant reports: Delegated administrators can view reports on the Email Security Monitor 
pages related to their Mail Policies and Content Filters and DLP Policies access privileges. 
Delegated administrators with Mail Policies and Content Filters access privileges can view the 
following Email Security Monitor pages:
Overview
Incoming Mail
Outgoing Destinations
Outgoing Senders
Internal Users
Content Filters
Virus Outbreaks
Virus Types
Archived Reports