Configure The Role-Based Access Control For Users, Comodo Endpoint Manager

Configure Role Based Access Control for Users

User privileges depend on the roles assigned to them. Admins can create roles with different access privileges and assign them to users as required. A single user can be assigned to any number of roles.

Staff created in Comodo Dragon or Comodo One can be added to any role for any company. This allows you to assign different roles to the same staff member for different companies.

You can restrict a role to specific companies/groups. Staff can only manage the devices of companies/groups allowed by their role.

You can also create roles with read-only privileges. These allow staff to view assigned interfaces but not make changes.

The role management area has two tabs:

Roles - View and edit each role's permissions. You can also create custom roles here.

Users - View users and assign them to roles

Roles

Each role defines a staff member's rights to access EM modules and to manage users/devices belonging to different companies. You can restrict a role to manage specific companies and specific device groups.

Endpoint Manager ships with four roles, 'Account Admin', 'Administrators', 'Technician' and 'Users'.

The 'Account Admin' role can be viewed but not edited. The permissions in the other three roles can be modified. You can also create custom roles according to your requirements.

Custom roles and built-in roles are available for selection when adding a new user.

Admins can add or remove roles at any time. You can also change the role of any user at any time.

New users are assigned the 'User' role by default. However, you have the option to make any role the default.

Roles - Column Descriptions
Column Heading	Description
Name	Role label. Click a role name to open the 'Role Management > Permissions screen. You can view and manage permissions assigned to the role. See 'Manage Permissions and Assigned Users of a Role' for more details.
Description	A short description of the role.
Number of Users	Shows how many users are assigned to the role. Click the number to open the 'Assign Users' screen, which lets you manage users assigned to the role. See 'View the users assigned with the role' for more details.
Controls
Add Role	Create new roles and assign them to users. See Create a New Role for more details.
Export	Save the list of user roles as a comma separated values (CSV) file. The exported .csv is available in 'Dashboard' > 'Reports'. See Export the List of Roles for more details.

The roles interface allows admins to:

Edit a role name and description of a role

Manage the permissions assigned to a role

Manage the users assigned with a role

Export the List of Roles

Users

The 'Users' interface lets you view users added to EM and the roles assigned to them.

Users - Column Descriptions
Column Heading	Description
Name	The login username of the user. Click a username to view and manage roles assigned to the user. See Manage Roles assigned to a User for more details.
Email	The registered email address of the user.
Roles	The user roles assigned to the user. Click a role name to view and manage permissions assigned to the role. See 'Manage Permissions and Assigned Users of a Role' for more details.
Controls
Reset to Default Role	Revert the user's role to the Comodo Dragon or Comodo One system default role. Applies only to users imported from Comodo Dragon or Comodo One. It doesn't apply to users added via EM. See Restore user role in Manage Roles Assigned to a User for more.
Export	Save the list of users as a comma separated values (CSV) file. The exported .csv is available in 'Dashboard' > 'Reports'. See Export the List of Users for more details.