User Roles Comparison (Policy Compliance)

The following table provides a comparison of privileges granted to user roles for compliance management.

solid bullet means privilege is granted to the user role = privilege is granted to the user role

solid bullet means privilege is granted to the user role* = privilege that can be granted to the user role, depending on when subscription was created

o = privilege that can be assigned by a Manager

X = privilege that can be assigned by a Manager ONLY when subscription is configured to allow it

To give a user the ability to perform compliance tasks, edit the user's account and select the "Manage compliance" option.

Manager and Auditor privileges apply to all user configurations (such as compliance profiles, policies, and exceptions), regardless of who created them. Unit Manager privileges apply to user configurations created within their respective business units. Scanner and Reader privileges apply to personal configurations only.

Privileges

Manager

Auditor

Unit
Manager

Scanner

Reader

Compliance Scanning

View compliance scan history

solid bullet means privilege is granted to the user role

 

o

o

 

Launch compliance scans

solid bullet means privilege is granted to the user role

 

o

o

 

Schedule compliance scans

solid bullet means privilege is granted to the user role

 

o

o

 

Cancel compliance scans

solid bullet means privilege is granted to the user role

 

o

o

 

Pause/resume compliance scans

solid bullet means privilege is granted to the user role

 

o

o

 

Compliance Reporting

Manage policy report templates

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

Run compliance reports (on compliance data)

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

o

o

o

General Management

Manage asset tags (Learn more)

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role*

Add compliance hosts

solid bullet means privilege is granted to the user role

 

o

X

 

Remove compliance hosts

solid bullet means privilege is granted to the user role

       

View compliance hosts

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

o

o

o

Purge compliance host information

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

o

o

o

Manage compliance policies

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

o

 

 

Manage compliance profiles

solid bullet means privilege is granted to the user role

 

o

o

 

Manage authentication records and vaults

solid bullet means privilege is granted to the user role

 

o

X

 

Manage business units

solid bullet means privilege is granted to the user role

 

 

 

 

Manage networks

solid bullet means privilege is granted to the user role

 

 

 

 

Controls

View controls

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

o

o

o

Add comments to controls

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

     

Create user defined controls

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

o

   

Update/delete user defined controls

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

o

   

Exceptions

Create exception requests

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

o

o

o

Add comments to exceptions

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

o

o

o

Reassign exceptions

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

o

o

o

Accept/reject exceptions

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

o

 

 

Delete exceptions

solid bullet means privilege is granted to the user role

solid bullet means privilege is granted to the user role

 

 

 

 

Check out this video: