Ricoh Aficio MP C2800 Security Target - Page 15

1.4.3 User Roles This section describes the roles involved in this TOE operation. Page 15 of 80 1.4.3.1 Responsible Manager of MFP The "responsible manager" of the MFP is a person who belongs to the organisation that uses the TOE, and has the role of selecting the TOE administrators and TOE supervisor. The responsible manager of the MFP selects up to four administrators and one superviso r. When selecting administrators, the responsible manager assigns each administrator one or more of the following administrator roles: user administration, machine administration, network administration, and/or file administration. 1.4.3.2 Administrator An "administrator" is a user who is registered on the TOE as an administrator. One to four administrators can be registered for the TOE. Administrator roles for administrators include user administration, machine administration, network administration, and file administration. Administrators may have concurrent administrator roles, and administrator roles can be assigned to one or more administrators. One default administrator is registered and assigned all four administrator roles as a factory setting. When the TOE is being installed, the administrators who are selected by the responsible manager change the settings of their own administrator IDs, passwords, and administrator roles. Table 1 describes the duties involved in each administrator role. Table 1: List of administrator roles Administrator role User administration Machine administration Network administration File administration Explanation about duties involved Managing general users. Managing machines and performing audits. Managing the TOE's network connections. Managing the documents stored in the TOE. 1.4.3.3 Supervisor The "supervisor" is a user who manages administrator passwords and changes them. One supervisor must be registered for the TOE. A default supervisor is registered for the TOE as a factory setting. The person selected to be a supervisor by the responsible manager can change the supervisor ID and password of the default supervisor. 1.4.3.4 General User A "general user" is an authorised TOE user who is registered in the Address Book by a user administrator. General users can store document data in the TOE and perform operations on the document data. Copyright (c) 2009,2010 RICOH COMPANY, LTD. All Rights Reserved.