Granting rights and authentication

Granting rights

Corporate App Catalog and Corporate App Catalog Management Console support the role-based access control (RBAC) roles, defined in Kaspersky Security Center. You can configure access rights to Corporate App Catalog features in the MMC-based Administration Console of Kaspersky Security Center or in Kaspersky Security Center Web Console. You can grant rights to users before or after installing the solution.

To perform actions in Corporate App Catalog, the users need to have the right specified next to the action listed in the table below.

Access rights to user actions in Corporate App Catalog

User action	Users	Rights
Downloading apps from Corporate App Catalog	Company employees, company administrators	Read
Connecting new devices to Kaspersky Security Center via Corporate App Catalog	Company employees, company administrators	Read, Connect new devices
Viewing the unlock code for device	Company employees, company administrators	Read, Send commands to mobile devices
Adding new apps to the catalog via Corporate App Catalog Management Console	Company administrators	Read, Write

To grant rights to a user or a user group in the MMC-based Administration Console:

1. In the console tree, do one of the following:
   • Expand the Administration Server node and select the subfolder with the name of the required Administration Server.
   • Select the administration group.
2. In the context menu of the Administration Server or the administration group, select Properties.
3. In the Administration Server properties window (or the administration group properties window) that opens, in the left Sections pane select Security.

   The Security section is available if the Display security settings sections check box is selected in the interface settings window.

4. In the Security section, in the Names of groups or users list select a user or a group.
5. In the permissions list in the lower part of the workspace, on the Rights tab, open Kaspersky Security Center Administration Server → Mobile Device Management → Self Service Portal.

   The user can use Corporate App Catalog if the permission is granted for the required access right in at least one of the functional areas: General or Self Service Portal.

6. Configure the set of rights for the user or group:
   1. Select the Allow and Deny check boxes next to the permissions that you want.
7. Click Apply to save the changes.

The set of rights for the user or group of users is now configured.

To grant rights to a user or a user group in Kaspersky Security Center Web Console:

1. In the main window of Kaspersky Security Center Web Console, click the settings icon () next to the name of the Administration Server.

   The Administration Server properties window opens.

2. Go to the Access rights tab.
3. Select a user or group.
4. Click Access rights at the top of the list.
5. In the Rights window that opens, select Kaspersky Security Center Administration Server → Mobile Device Management → Self Service Portal.

   The user can use Corporate App Catalog if the permission is granted for the required access right in at least one of the functional areas: General or Self Service Portal.

6. Select the Allow and Deny check boxes next to the permissions that you want to grant or deny the user or group.
7. Click OK.
8. Click Save to save the changes you have made.

The set of rights for the user or group of users is now configured.

Authentication in Corporate App Catalog and Corporate App Catalog Management Console

Corporate App Catalog and Corporate App Catalog Management Console support the following authentication methods:

• Using domain username and password (accounts of organization employees).

  To use domain authentication, poll your users from the Active Directory. To use Corporate App Catalog functionality, an administrator must grant company employees the required access rights.

• Using the internal username and password (accounts that were created by the administrator in Kaspersky Security Center).

  For more details on internal user accounts, please refer to Kaspersky Security Center Help. To use Corporate App Catalog functionality, an administrator must grant company employees the required access rights.

Corporate App Catalog uses the global list of Kaspersky Security Center users. The list is expanded automatically when importing users from Active Directory or manually.

Page top