Access rights to application features
The table below shows the Kaspersky Security Center features with the access rights to manage the associated tasks, reports, settings, and perform the associated user actions.
To perform the user actions listed in the table, a user has to have the right specified next to the action.
Read, Write, and Execute rights are applicable to any task, report, or setting. In addition to these rights, a user has to have the Perform operations on device selections right to manage tasks, reports, or settings on device selections.
The General features: Access objects regardless of their ACLs functional area is intended for audit purposes. When users are granted Read rights in this functional area, they get full Read access to all objects and are able to execute any created tasks on selections of devices connected to the Administration Server via Network Agent with local administrator rights (root for Linux). We recommend to carefully grant these rights to a limited set of users who need them to perform their official duties.
IM_NEW{All tasks, reports, settings, and installation packages that are missing in the table belong to the General features: Basic functionality functional area.
Access rights to application features
Functional area | Right | User action: right required to perform the action | Task | Report | Other |
---|---|---|---|---|---|
General features: Management of administration groups | Write |
| None | None | None |
General features: Access objects regardless of their ACLs | Read | Get read access to all objects: Read | None | None | Access is granted regardless of other rights, even if they prohibit read access to specific objects. |
General features: Basic functionality |
|
|
|
| None |
General features: Deleted objects |
|
| None | None | None |
General features: Event processing |
|
| None | None | Settings:
|
General features: Operations on Administration Server |
|
|
| None | None |
General features: Kaspersky software deployment |
| Approve or decline installation of the patch: Manage Kaspersky patches | None |
| Installation package: "Kaspersky" |
General features: Key management |
|
| None | None | None |
General features: Enforced report management |
|
| None | None | None |
General features: Hierarchy of Administration Servers | Configure hierarchy of Administration Servers | Register, update, or delete secondary Administration Servers: Configure hierarchy of Administration Servers | None | None | None |
General features: User permissions | Modify object ACLs |
| None | None | None |
General features: Virtual Administration Servers |
|
| None | "Report on results of installation of third-party software updates" | None |
General features: Encryption Key Management | Write | Import the encryption keys: Write | None | None | None |
Mobile device management: General |
|
| None | None | None |
System management: Connectivity |
|
| None | "Report on device users" | None |
System management: Hardware inventory |
|
| None |
| None |
System management: Network access control |
|
| None | None | None |
System management: Operating system deployment |
|
| "Create installation package upon reference device OS image" | None | Installation package: "OS Image" |
System management: Vulnerability and patch management
|
|
|
| "Report on software updates" | None |
System management: Remote installation |
|
| None | None | Installation packages:
|
System management: Software inventory |
| None | None |
| None |