Roles
This section contains the tables of roles and rights of the following users:
- Administrator — full access to all system functions and settings
- Operator — rights to change user settings and authentication device settings only
- Inspector — read access to all system data and settings
Registering authenticators
| Operation | Administrator | Operator | Inspector |
|---|---|---|---|
| Register the first authenticator |  | |  |
| Register any authenticator | | | |
User authenticators
| Operation | Administrator | Operator | Inspector |
|---|---|---|---|
| View user authenticators | | | |
| Disable user authenticators | | | |
| Enable user authenticators | | | |
| Delete user authenticators | | | |
| Unblock user authentication methods | | | |
| Get user authentication methods | | | |
| Enable user authentication methods | | | |
| Disable user authentication methods | | | |
| View the state of a user authentication method | | | |
| Change authentication method settings | | | |
| View authentication method settings | | | |
| Change user authentication method settings | | | |
| View user authentication method settings | | | |
| Change application authentication method settings | | | |
| View application authentication method settings | | | |
| Change access rights for an authenticator | | | |
| View access rights for an authenticator | | | |
| Change authentication method settings in a policy | | | |
| View authentication method settings in a policy | | | |
Licenses
| Operation | Administrator | Operator | Inspector |
|---|---|---|---|
| Register licenses | | | |
| Unregister licenses | | | |
| View registered licenses | | | |
| Issue a license to a user | | | |
| Revoke a license from a user | | | |
| View user licenses | | | |
Administrative access
| Operation | Administrator | Operator | Inspector |
|---|---|---|---|
| Add a directory object to an access group | | | |
| Remove a directory object from an access group | | | |
| View access group members | | | |
Authentication devices
| Operation | Administrator | Operator | Inspector |
|---|---|---|---|
| Register a device | | | |
| Update a device | | | |
| View the device list | | | |
| Delete a device | | | |
Policies
| Operation | Administrator | Operator | Inspector |
|---|---|---|---|
| Create a policy | | | |
| Modify a policy | | | |
| Delete a policy | | | |
| View the policy list | | | |
| View the list of policy users | | | |
| Modify the list of policy users | | | |
| View the list of policy applications | | | |
| Modify the list of policy applications | | | |
| View the policy priority | | | |
| Change the policy priority | | | |
Caching user data on a computer
| Operation | Administrator | Operator | Inspector |
|---|---|---|---|
| Enable caching | | | |
| Disable caching | | | |
| Check the cache state | | | |
| Change caching settings | | | |
| View caching settings | | | |
ESSO accounts
| Operation | Administrator | Operator | Inspector |
|---|---|---|---|
| Add an account | | | |
| Delete an account | | | |
| View user accounts | | | |
| Read the state of user accounts | | | |
| Change the password of user accounts | | | |
| View the password state of a user account | | | |
| Change the name of a user account | | | |
| View the name of a user account | | | |
| Change the settings of a user account | | | |
| View the settings of a user account | | | |
| Change the additional data of a user account | | | |
| View the additional data of a user account | | | |
| Set a random password for a user account | | | |
| Change the account password | | | |
Applications
| Operation | Administrator | Operator | Inspector |
|---|---|---|---|
| View the list of business applications | | | |
| Create a business application | | | |
| Modify a business application | | | |
| Delete a business application | | | |