Creating a role

To create a role:

In the main window of the application web interface, open the management console tree and select the Accounts and roles section, then select the Roles tab.
This opens the table of roles.
Click Create role.
This opens the role creation window.
In the Role name field, enter a name for the new role.
The role name is case-sensitive.
Under Permissions, select check boxes next to permissions that the role must have. Possible permissions are listed in the table below.
Click Create.

The role is created.

User permissions

Functional area	Permission	Description
Dashboard and reports	View dashboard and reports	Allows viewing the Dashboard and Reports sections, but not editing settings there.
Dashboard and reports	Manage dashboard and reports	Allows editing report settings as well as viewing information in the Dashboard and Reports sections.
Settings	View settings	Allows viewing application settings in the Settings section, but not editing settings there.
	Edit settings	Allows editing application settings in the Settings section, except for SSH access settings. The user can also view application settings.
	Manage SSH access	Allows editing application settings in the SSH access section. The user can also view application settings.
Rules	View rules	Allows viewing the table of message processing rules. The user cannot add or delete rules, or modify rule settings.
	Create/edit rules	Allows adding message processing rules as well as editing their settings.
	Delete rules	Allows deleting message processing rules.
Events	View mail traffic events	Allows viewing information about traffic processing events.
Events	View application events	Allows viewing information about application events.
Accounts and roles	View accounts and roles	Allows viewing accounts and roles in the Accounts and roles section. The user cannot add or delete user accounts and roles, or edit user account and role settings.
	Create/edit accounts and roles	Allows creating and editing user accounts and roles and assigning and revoking roles. The user cannot delete user accounts and roles or change account passwords.
	Delete accounts and roles	Allows deleting user accounts and roles. The user can also view the list of accounts and roles in the Accounts and roles section.
	Change user password	Allows change another user's password. The user can also view the list of accounts and roles in the Accounts and roles section.
Nodes	View nodes information	Allows viewing information about nodes in the Nodes section. The user cannot add or delete nodes, or modify node settings and roles.
	Create/edit/delete nodes	Allows adding and removing cluster nodes as well as editing settings and roles of nodes in the cluster. The user can also view information about cluster nodes.
	Get diagnostic information	Allows receiving diagnostic information about cluster nodes. The user can also view information about cluster nodes.
	Check data integrity	Allows running an integrity check on cluster nodes as well as viewing integrity check results. The user can also view information about cluster nodes.
Message Queue	View messages information	Allows viewing information about Anti-Spam quarantine and KATA quarantine (if integration with KATA is configured) in the Message queue section.
	Flush messages	Allows force sending a message from the queue out of order. The user can also view information about Anti-Spam quarantine and KATA quarantine (if integration with KATA is configured) in the Message queue section.
	Delete messages	Allows removing messages from the queue. The user can also view information about Anti-Spam quarantine and KATA quarantine (if integration with KATA is configured) in the Message queue section.
Backup	View messages	Allows viewing information about objects in Backup in the Backup section.
	Deliver messages	Allows delivering to recipients those messages in Backup for which the Anti-Virus, Anti-Phishing, and Link Scanning modules did not detect any threats. The user can also view information about objects in Backup.
	Deliver insecure messages	Allows delivering any messages from Backup to recipients. The user can also view information about objects in Backup.
	Forward messages to any addresses	Allows forwarding messages from Backup to any address if Anti-Virus, Anti-Phishing, and Link Scanning modules did not detect any threats in those messages. The user can also view information about objects in Backup.
	Forward insecure messages to any addresses	Allows forwarding any messages from Backup to any addresses. The user can also view information about objects in Backup.
	Delete messages.	Allows deleting messages from Backup. The user can also view information about objects in Backup.
	Preview and download raw messages	Allows you to view messages in Backup and save to disk in their original form those messages in which the Anti-Virus, Anti-Phishing, and Link scanning modules did not detect any threats. The user can also view information about objects in Backup.
	Preview and download raw insecure messages	Allows you to view messages in Backup and save to disk any messages in their original form. The user can also view information about objects in Backup.
	Preview messages	Allows you to view a message in Backup in the Plain text and HTML modes. The user can also view information about objects in Backup.
	View remote content and links	Allows you to view a message in Backup in the Plain text and HTML modes and view external content and links. The user can also view information about objects in Backup.
Allowlists and denylists	View all allowlists and denylists	Allows viewing personal allow and deny lists of addresses. The user cannot edit these lists.
Allowlists and denylists	Manage all allowlists and denylists	Allows adding, removing, and editing addresses in personal allow and deny lists of addresses. The user can also view all personal lists.