Symantec 10521146 Administration Guide - Page 320

320 User groups reference About user groups the Network Security console. To avoid making conflicting changes on master nodes, it is best to log into a single master node only, and make all changes there. This section describes the permissions in detail by group and by task: ■ Permissions by group ■ Permissions by task Permissions by group Symantec Network Security grants specific sets of permissions and access to each of the four user groups: SuperUser, Administrator, StandardUser, and RestrictedUser. The four groups and their respective permissions are predefined, and SuperUsers cannot modify them. The SuperUser manages all accounts from the Network Security console by logging into the master node, and the user database is then synchronized across all slave nodes in a cluster. This section describes the permissions of the user groups in detail: ■ SuperUsers: A user authenticated with full administrative capabilities. This user is allowed to perform all administrative tasks that the Network Security console can execute. ■ Administrators: A user authenticated with partial administrative capabilities. This user is allowed to perform most administrative tasks, with the exception of some advanced actions. ■ StandardUsers: A user authenticated with full read-only capabilities. This user is allowed to view all information in the Network Security console. ■ RestrictedUsers: A user authenticated with partial read-only capabilities. This user is allowed to view most information in the Network Security console, with the exception of some advanced information and network-sensitive data. Note: If you are not a member of one of these predefined groups, you will not be allowed access to the Network Security console at all.