Permissions to configure group policies

Kaspersky Security Center administrators can configure the access rights of Administration Console users for different application functions, depending on the job duties of users.

For each functional area, the administrator can assign the following permissions:

• Allow editing. The Administration Console user is allowed to change the policy settings in the properties window.
• Block editing. The Administration Console user is prohibited from changing the policy settings in the properties window. Policy tabs belonging to the functional scope for which this right has been assigned are not displayed in the interface.

  Permissions to access sections of the Kaspersky Endpoint Security for Android Administration Plug-in

  Functional scope	Policies section
  Android work profile	Android work profile
  Anti-Theft	Anti-Theft
  App Control	App Control
  Protection	Scan, Protection, Database update
  Compliance Control	Compliance Control
  Device Management	Device Management, Synchronization
  Manage Samsung device	APN, Manage Samsung device, KNOX containers, Firewall
  System management	Additional, Wi-Fi
  Web Protection	Web Protection
  Device owner mode	Feature restrictions, Google Chrome settings, Exchange ActiveSync, Kiosk mode, NDES and SCEP

  Permissions to access sections of the Kaspersky Device Management for iOS Administration Plug-in

  Functional scope	Policies section
  Additional	Web clips, Fonts, AirPlay, AirPrint
  Exchange ActiveSync	General, Password, Synchronization, Features restrictions, Applications restrictions
  General	General, Single Sign-On, Web Protection, Wi-Fi, Access Point Name (APN), Exchange ActiveSync, Email, Custom Payloads
  LDAP (calendar / contacts)	LDAP, Calendar, Contacts, Calendar subscriptions
  Limitations and security	Feature Restriction, Restrictions for Applications, Restrictions for Media Content, Password, VPN, Global HTTP proxy, Certificates, SCEP