Configuring access permissions for managing Kaspersky Industrial CyberSecurity for Nodes and the Kaspersky Security Service

You can edit the list of users and user groups allowed to access Kaspersky Industrial CyberSecurity for Nodes functions and manage Kaspersky Security Service, and also edit the access permissions of those users and user groups.

To add or remove a user or group from the list:

1. In the Application Console tree, open the context menu of the Kaspersky Industrial CyberSecurity for Nodes node and do one of the following:
   • Select Modify user rights of application management if you want to edit the list of users who have access permissions for managing Kaspersky Industrial CyberSecurity for Nodes functions.
   • Select Modify user rights of Kaspersky Security Service management if you want to edit the list of users who have access permissions for managing the Kaspersky Security Service.

     The Permissions for Kaspersky Industrial CyberSecurity for Nodes window opens.

2. In the window that opens, perform the following operations:
   • In order to add a user or group to the list, click the Add button and select the user or group.
   • To remove a user or group from the list, select the user or group and click the Remove button.
3. Click the Apply button.

The selected users (groups) are added or removed.

To edit a user’s or group’s permissions to manage Kaspersky Industrial CyberSecurity for Nodes or the Kaspersky Industrial CyberSecurity for Nodes Service:

1. In the Application Console tree, open the context menu of the Kaspersky Industrial CyberSecurity for Nodes node and do one of the following:
   • Select Modify user rights of application management if you want to configure access permissions for Kaspersky Industrial CyberSecurity for Nodes functions.
   • Select Modify user rights of Kaspersky Security Service management if you want to configure access permissions for the Kaspersky Security Service.

     The Permissions for Kaspersky Industrial CyberSecurity for Nodes window opens.

2. In the window that opens, in the Group or user names list, select the user or group of users whose permissions you want to change.
3. In the Permissions for group "<User (Group)>" section, select the Allow or Deny check boxes for the following access levels:
   • Click the Settings button in the User access permissions for application management subsection if you want to edit the list of users who have access permissions for managing Kaspersky Industrial CyberSecurity for Nodes functions.
   • Click the Settings button in the User access permissions for Kaspersky Security Service management subsection if you want to edit the list of users who have access permissions for managing the application via the Kaspersky Security Service.

     The Permissions for Kaspersky Industrial CyberSecurity for Nodes window opens.

4. In the window that opens, in the Group or user names list, select the user or group of users whose permissions you want to change.
5. In the Permissions for <User (Group)> section, select the Allow or Deny check boxes for the following access levels:
   • Full control: full set of permissions to manage Kaspersky Industrial CyberSecurity for Nodes or the Kaspersky Security Service.
   • Read:
     • The following permissions to manage Kaspersky Industrial CyberSecurity for Nodes: Retrieve statistics, Read settings, Read logs and Read permissions.
     • The following permissions to manage the Kaspersky Security Service: Read service settings, Request status from Service Control Manager, Request status from service, Read list of dependent services, Read permissions.
   • Modification:
     • All permissions to manage Kaspersky Industrial CyberSecurity for Nodes, except Edit permissions.
     • The following permissions to manage the Kaspersky Security Service: Modify service settings, Read permissions.
   • Special permissions: the following permissions to manage the Kaspersky Security Service: Starting service, Stop service, Pause / Resume service, Read permissions, User defined requests to service.
6. To configure advanced permissions for a user or group (Special permissions), click the Advanced button.
   1. In the Advanced security settings for Kaspersky Industrial CyberSecurity for Nodes window that opens, select the desired user or group.
   2. Click the Edit button.
   3. In the drop-down list in the top part of the window, select the type of access control (Allow or Block).
   4. Select the check boxes next to the functions that you want to allow or block for the selected user or group.
   5. Click the OK button.
   6. In the Advanced security settings for Kaspersky Industrial CyberSecurity for Nodes window, click OK.
7. In the Permissions for Kaspersky Industrial CyberSecurity for Nodes window, click the Apply button.

The configured permissions for managing Kaspersky Industrial CyberSecurity for Nodes or the Kaspersky Security Service are saved.