Previous Topic: Configure Fields, Events, and Role Use

Next Topic: Active Directory Restrictions

Users, Groups, and Administrative Roles

When creating a user, you assign it one or more admin roles or privileged access roles. An admin role contains tasks that correspond to application functions in CA Access Control Enterprise Management. When you assign an admin role to a user, that user can perform the tasks contained in the admin role. Tasks enable users to perform CA Access Control functions, such as creating a policy, deploying a policy, creating a host group, and managing other users.

A privileged access role defines the tasks that correspond to privileged accounts management on the managed endpoints. When assigning a privileged access role to a user, that user can perform privileged account management task such as, checking and out privileged accounts passwords.

To make administration easier, you can create groups of users, and assign an admin role to a group. Each user in the group can then complete all the tasks in that admin role.

More information:

Create a User

Types of Groups