Administration Guide › User Administration › User Properties › User Roles › Default User Roles

Default User Roles

The default user roles are listed below. You can also create your own custom roles.

Administrator

These administer your CA DataMinder installation. By default, these have the full range of privileges.

Note: If future versions of CA DataMinder introduce new privileges, these will be granted automatically to all users with an Administrator role when you run the upgrade.

Manager

These users manage your organization. Their privileges focus on searching for captured data.

Policy Administrator

These users are permitted to view and edit policies, but not to manage user or machine accounts or search for captured data.

Reviewer

These users have the same privileges as Managers but can also view and edit the audit status of captured events.

Security Reviewer, PCI Compliance Reviewer, Human Resources Reviewer, Compliance Reviewer

These specialist user roles have the same privileges as an ordinary Reviewer, but they are each associated with a specific policy role. This means that the reviewer can only see specific types of events in the iConsole or Data Mangement console.

For example, the PCI Compliance Reviewer user role restricts reviewers so that they can only see events that breached your policies on the handling of payment card information. (This user role is associated with the 'PCI Compliance Policies' policy role, which in turn is based on the Credit Card Information policies in the PII policy class.)

Likewise, users with the Human Resources Reviewer role can only see events that breached Employee Behavior policies.

Note: You must configure these reviewer roles before you can assign them to users.

System Process

This user role is reserved for the NT_AUTHORITY\SYSTEM and Quarantine Manager user accounts. Do not assign this role to real users.

The NT_AUTHORITY\SYSTEM account is created automatically when you install the CMS.

The Quarantine Manager account is a CA DataMinder account that operates in conjunction with the QM domain user. For details, see the Quarantine Manager chapter in the Platform Deployment Guide.

User

These users are ordinary CA DataMinder users with no administrative privileges.

UserRole1 and UserRole2

These are existing custom roles that you can customize to suit the needs of your organization.

More information:

User Properties