Skip to content
English
  • There are no suggestions because the search field is empty.

User Role Settings

This article explains the purpose and configuration of User Roles and the ZeroLock® Management Console (ZMC) sections that are covered by the User Role.

For ZeroLock Management Console version before v4.2.x, please use this link.

The User Role feature enables administrators to efficiently manage users by assigning them to groups (roles) instead of granting permissions to specific sections of the ZMC environment.

On the ZMC, select Manage Users followed by User Roles. Click a box next to the role that you want to configure. The User Role settings screen will appear on the right, with the options to Duplicate, Edit, or Delete the role. The check boxes in the sections will be greyed out.

Image_1_User Role Screen_v4.2.x

Selecting Edit opens the Edit User Role screen. The number following is the number of the role being edited.

The screen consists of fields for the User Role name and description, followed by five (5) sections used to configure what someone with that User Role may modify and view.

Clicking the Modify or View column heading will select all the boxes in that column. When editing is done, select UPDATE to apply the changes.

Image_2_Edit User Role Screen_v4.2.x

When creating multiple roles with slightly different permissions, without having to manually set the same permissions for each role, using DUPLICATE is a great time saver. Once the changes have been made, rename the role and select CREATE.

Selecting Duplicate instead of Edit creates a copy of the current user role with a placeholder name consisting of the current role name with 'copy' appended to it. The duplicate of 'Demo User ' would be 'Demo User copy', for example.


Setting User Permissions

 Possible user permissions are Modify and View.

  1. Modify enables the user to make changes in the assigned section of the ZMC and view the changes.
  2. View alone only permits the user to view the settings for a ZMC section. The options to duplicate, edit, and delete are not available.

Below, the administrator has permitted the Demo User Role to modify Control Policies by selecting the corresponding checkbox. When you select Modify, View is automatically selected. 

Image_1_Modify_v4.2.x

After selecting UPDATE, a warning may appear if a user has been assigned to this role requiring you to CONFIRM before proceeding.

Warning_v4.2.x

  1. Modify - For a user with modify permission for Control Policies, the image below is what they will see when viewing Control Policies. As this is a Default policy, only Duplicate and Edit are available. Items greyed out are those for which the User Role does not have permission to alter.
    Image_2_Joe Demo Modify _v4.2.x_KB

    For policies other than default, the options will include Delete, as shown below.

    Image_3_Policies Delete Option_v4.2.x
  2. View - The image below shows what a user with only view permission for Control Policies sees. The option to Duplicate, Edit, and Delete is absent.
    Image_4_View Only_v4.2.x
  3. Neither - A user with neither Modify nor View permissions will have the Control Policies section greyed out and unable to access it.
    Image_5_Neither_v4.2.x_KB

ZeroLock Management Console Sections

There are the five (5) sections of the ZMC that User Roles may configure permissions for.

  1. Activities
  2. Control Policies
  3. System Configuration
  4. Manage Endpoints
  5. Manage Users

 

Activities - Provides access to the Activity Logs section on the Dashboard.Image_1_Activities_v4.2.x

Control Policies - Provides access to Rules and Policies.

Image_2_Control Policies_v4.2.x

System Configuration - Provides access to the System Configuration setting page. Depending on the permissions (View and/or Modify), this role enables configuring four areas: Data Management, General, Integrations, and SSO (Single Sign On).

Image_3_System Configuration_v4.2.x

  

Manage Endpoints - Provides access to endpoints, endpoint groups, and endpoint profiles.

Image_4_Manage Endpoints_v4.2.x

Manage Users - Provides access to the User accounts, User roles and Tenants pages.

Image_5_Manage Users_v4.2.x

That concludes your introduction to User Role settings.