Symantec Endpoint Security

Portugues Chinese (Simplified) Español Français Japanese Chinese (Traditional) English

Default administrator roles in the cloud console

The cloud console includes multiple default administrator roles, each of which provides a unique set of privileges. You cannot edit or delete the default roles, but you can create custom roles. For more information, see:
Cloud console default roles
Role
Description
Super Administrator
Role includes create, edit, and delete privileges of all resources in the cloud console.
Super Administrators are only visible in the domain that you created them in.
Among other privileges, a Super Administrator can:
  • Request product trials.
  • Create other administrator accounts.
  • Change administrator roles.
  • Create, rename, or delete a domain.
  • Create custom roles.
  • View and manage multiple domains.
Domain Administrator
Role includes create, edit, and delete privileges of all resources in the cloud console for a particular domain.
The Domain Administrator role can request trials only when they were explicitly given access to the Testpad domain.
Limited Administrator
Role includes create and edit privileges of all resources in the cloud console.
The Limited Administrator role can request trials only when they were explicitly given access to the Testpad domain.
Security Analyst
Role includes full access to EDR Investigation, Incidents, and Remediation actions in the cloud console.
Viewer
Role includes read-only access privileges to all resources in the cloud console.
The following table lists the default privileges for each role.
Default role privileges
Sub-Category
Privilege
Super Admin
Domain Admin
Limited Admin
Security Analyst
Viewer
Devices category
Group Management
Create and Edit
√
√
√
Delete
√
√
Commands
Run LiveUpdate
√
√
√
Quick Scan & Full Scan
√
√
√
Quarantine/ Unquarantine
√
√
√
Reboot
√
√
Alerts and Events category
Alerts and Event Rules Management
View
√
√
√
√
√
Create and Edit
√
√
√
Delete
√
√
√
Investigation category
Investigation
Trigger Endpoint Search/Capture Forensic Data:
√
√
√
  • Cancel
√
√
√
  • Delete
√
√
√
Trigger Dump:
√
√
√
  • Cancel
√
√
√
  • Delete
√
√
√
Get File
√
√
√
Quarantine File
√
√
√
Submit To Sandbox
√
√
√
Live Shell
√
√
Incident
Comment
√
√
√
Close
√
√
√
Policy Management category
Policy Management
Create and Edit
√
√
√
√
Delete
√
√
View
√
√
√
√
√
Policy Targeting
Target on Asset Groups
√
√
√
√
Policy Group Management
Create and Edit
√
√
√
Delete
√
√
Settings category
SEPM Enrollment
Enroll New Sites
√
√
√
More information