Assign
WSS
User Based on Role

The

Web Security Service

allows Admin users to grant other users access to the portal and assign those users privileges based on their role in the organization. Currently, there are three roles:

Admin

—Full access to all portal pages and configuration.

Reporting

—No access to service configurations. Full access to reporting. For example, you have a Human Resource employee who is tasked with tracking web use of employees who belong to a specific group, so you create a filter for location, subnet, or other criteria. You can limit the type of data that displays in reports. For example, the HR employee is not concerned with port or client IP address values, so you remove those fields from the role.

Reviewer

—A person, such as an outside security consultant, requires access to audit policies. In this role, they cannot add or change any configurations, and some pages are not viewable.

Reports/Policies

Dashboards

and

Report Center

are hidden.

Policy Editor is view-only. The auditor can look at all policy rules but cannot perform alterations.

WSS

is connecting with Symantec Management Center in a Universal Policy Enforcement capacity, Policy Editors are hidden.

Admin Tasks

Hidden pages—

Hosted Reporting

and

Log Download

(reporting-related).

Hidden options because they do not apply to this role—Download certificates, installers, DLP token.

All other viewable pages and options are view only. The auditor can review what attributes (such as user names) are assigned to an object, but cannot see the selectable panes.