Configuring access permissions for Kaspersky Embedded Systems Security for Windows and the Kaspersky Security Service

To configure the access permissions for a user or group you need to specify the security descriptor string using the security descriptor definition language (SDDL). For detailed information about the security descriptor string, please visit the Microsoft website.

To configure the access permissions for a user or group:

1. In the main window of the Kaspersky Security Center Web Console, select Devices → Policies & profiles.
2. Click the policy name you want to configure.
3. In the <Policy name> window that opens select the Application settings tab.
4. Select the Supplementary section.
5. Do one of the following:
   • Click the Settings button in the User access permissions for application management subsection if you want to edit the list of users who have access permissions for managing Kaspersky Embedded Systems Security for Windows functions.
   • Click the Settings button in the User access permissions for Kaspersky Security Service management subsection if you want to edit the list of users who have access permissions for managing the Kaspersky Security Service.
6. Add a user or group by specifying the security descriptor string in the User access permissions for application management or User access permissions for Kaspersky Security Service management window.
7. Click the OK button.