Product Guide › Administering CA Access Control for Virtual Environments › World View › Manage Your Enterprise Implementation

Manage Your Enterprise Implementation

Using CA Access Control Enterprise Management you can view and manage your enterprise implementation of CA Access Control for Virtual Environments. Enterprise "World View" is a snapshot of your PUPM endpoints and managed devices, their logical security groups, the deployed policies, and the policy tags.

The enterprise deployment snapshot is based on the managed devices and groups hierarchy that you configured in the VMware vCenter Server. Any change you make to the hierarchy in VMware vCenter, is displayed also in the World View.

Follow these steps:

1. Go to the World View tab, Security Groups, Security Groups Management

   The Security Groups Management page appears displaying the security groups on the VMware vCenter Server and the logical groups, defined by the CA Access Control Server.

   Note: You can configure, modify, or change the hierarchy for CA Access Control for Virtual Environments managed devices only.

2. (Optional) You can define additional managed devices, security groups, tags and tag rules in the CA Access Control Server. Select the following from the Actions menu:
   • Create Security Groups
   • Create Tags
   • Create Tag Rules
   • View Policy Status
3. From the Security Groups section, select a security group.

   CA Access Control Enterprise Management displays the security group details, assigned policies, group members and compliance status of each member.

4. Select Add Policy to manage the security group policies.

   Following are the available policies:

   • Network zone—configure network segregation policies
   • Audit Collection—configure CA User Activity Reporting Module audit collection policies
   • Hypervisor Hardening—configure hypervisor hardening policies
   • Password Lockdown—configure privileged account password lockdown policies
5. (Optional) Select Configure to modify an existing policy or Remove to remove a policy.