hmLoadTopic({
hmKeywords:"manage permission sets,new permission set",
hmTitle:"Manage Permission Sets",
hmDescription:"To manage a permission set, click the permission set and select one of the available actions:",
hmPrevLink:"admin_ar_permissions_sets.html",
hmNextLink:"admin_ar_permissions_list.html",
hmParentLink:"admin_ar_permissions_sets.html",
hmBreadCrumbs:"<a href=\"using.html\">Using ESET PROTECT On-Prem<\/a> &gt; <a href=\"working_with_era.html\">ESET PROTECT On-Prem Main Menu<\/a> &gt; More &gt; <a href=\"admin_access_rights.html\">Access Rights<\/a> &gt; <a href=\"admin_ar_permissions_sets.html\">Permission Sets<\/a>",
hmTitlePath:"Using ESET PROTECT On-Prem > ESET PROTECT On-Prem Main Menu > More > Access Rights > Permission Sets > Manage Permission Sets",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">Manage Permission Sets<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\"><img alt=\"Permission set actions\" title=\"Permission set actions\" width=\"900\" height=\"550\" style=\"margin:0;width:900px;height:550px;border:none\" src=\".\/images\/manage_permission_sets.png\"\/><\/p>\n\r<p class=\"p_Normal\">To manage a permission set, click the permission set and select one of the available actions:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Details\" title=\"Details\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/details_default.png\"\/><span class=\"f_NormalList\"> <\/span><span class=\"f_UI\">Show Details<\/span><span class=\"f_NormalList\">—View permission set details.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Audit log\" title=\"Audit log\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/audit_log.png\"\/><span class=\"f_NormalList\"> <\/span><span class=\"f_UI\">Audit Log<\/span><span class=\"f_NormalList\">—<\/span>View the <a href=\"audit_log.html\" class=\"topiclink\">Audit Log<\/a> for the selected item.<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Tags\" title=\"Tags\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_tags.png\"\/><span class=\"f_NormalList\"> <\/span><span class=\"f_UI\">Tags<\/span><span class=\"f_NormalList\">—<\/span>Edit <a href=\"tags.html#assign_tags\" class=\"topiclink\">tags<\/a> (assign, unassign, create, delete).<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Edit\" title=\"Edit\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/edit_default.png\"\/><span class=\"f_NormalList\"> <\/span><span class=\"f_UI\">Edit<\/span><span class=\"f_NormalList\">—<a href=\"admin_ar_manage_permission_set.html#edit\" class=\"topiclink\">Edit<\/a> the permission set.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Duplicate\" title=\"Duplicate\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/duplicate_default.png\"\/><span class=\"f_NormalList\"> <\/span><span class=\"f_UI\">Duplicate<\/span><span class=\"f_NormalList\">—Create a duplicate permission set which you can modify and assign to a specific user. The duplicate will be stored in the home group of the user who duplicated it.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Delete\" title=\"Delete\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/delete_default.png\"\/><span class=\"f_NormalList\"> <\/span><span class=\"f_UI\">Delete<\/span><span class=\"f_NormalList\">—Delete the permission set.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Show native users.\" title=\"Show native users.\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_domain_users.png\"\/><span class=\"f_NormalList\"> <\/span><span class=\"f_UI\">Show native users<\/span><span class=\"f_NormalList\">—Show the list of assigned native users.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Show mapped security groups.\" title=\"Show mapped security groups.\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_user_group.png\"\/><span class=\"f_NormalList\"> <\/span><span class=\"f_UI\">Show mapped security groups<\/span><span class=\"f_NormalList\">—Show the list of assigned mapped domain security groups.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Access Group\" title=\"Access Group\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/move_default.png\"\/> <span class=\"f_UI\">Access Group<\/span> &gt; <img alt=\"Move\" title=\"Move\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/move_default.png\"\/> <span class=\"f_UI\">Move<\/span>—Move the object to another Static Group where it is available to users with sufficient rights for the target group. Changing the Access Group is useful when solving access issues with other <a href=\"admin_ar_users.html\" class=\"topiclink\">users<\/a>. Access Group sets the object\'s Static Group and access to the object based on the user\'s access rights.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_warning\" >\n\r<tr class=\"Table_warning\">\n\r<td class=\"Table_warning\" style=\"width:4px; background-color:#E04239;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_warning\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Warning\" title=\"Warning\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/warning.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_warning\"><p class=\"p_Normal\">All pre-defined permission sets have the <span class=\"f_UI\">All<\/span> group in the <span class=\"f_UI\">Static Groups<\/span> section. Be aware of this when assigning it to a user. Users will have these permissions over all objects in ESET PROTECT On-Prem.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"edit\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">Create or edit a permission set<\/span><\/h2>\n\r<p class=\"p_Normal\">To create a new permission set, click <span class=\"f_UI\">Add<\/span>. To edit an existing permission set, select the applicable permission set and click <span class=\"f_UI\">Edit<\/span>.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Basic<\/span><\/h2>\n\r<p class=\"p_Normal\">Type a <span class=\"f_UI\">Name<\/span> for the set (mandatory setting). You can also type a <span class=\"f_UI\">Description<\/span> and <span class=\"f_UI\">Tags<\/span>.<\/p>\n\r<p class=\"p_Normal\">Click <span class=\"f_UI\">Select tags<\/span> to <a href=\"tags.html#assign_tags\" class=\"topiclink\">assign tags<\/a>.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Static Groups<\/span><\/h2>\n\r<p class=\"p_Normal\">You can <span class=\"f_UI\">Select<\/span> a Static Group (or multiple Static Groups) or <span class=\"f_UI\">Create new group<\/span> that will take this competence. Permissions that are checked in the <span class=\"f_UI\">Functionality<\/span> section will apply over objects contained in groups selected in this section.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Functionality<\/span><\/h2>\n\r<p class=\"p_Normal\">Select individual modules for which you want to grant access. The user with this competence will have access to these specific tasks. It is also possible to set different permissions for each type of <a href=\"admin_server_tasks.html\" class=\"topiclink\">Server Task<\/a> and <a href=\"client_tasks.html\" class=\"topiclink\">Client Task<\/a>. There are available four pre-defined functionality sets. Select one of the four or select manually functionality check boxes.<\/p>\n\r<p class=\"p_Normal\">Granting <span class=\"f_UI\">Write<\/span> permission automatically grants <span class=\"f_UI\">Use<\/span> and <span class=\"f_UI\">Read<\/span> rights; granting <span class=\"f_UI\">Use<\/span> rights automatically grants <span class=\"f_UI\">Read<\/span> rights.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">User Groups<\/span><\/h2>\n\r<p class=\"p_Normal\">You can add a <a href=\"admin_user_management_new_user_group.html\" class=\"topiclink\">User Group<\/a> (or multiple User Groups) whose user parameters can be used inside a policy (for example <a href=\"admin_pol_override.html\" class=\"topiclink\">Override Mode<\/a>).<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Users<\/span><\/h2>\n\r<p class=\"p_Normal\">Choose a user to be assigned by this permission set. All available <a href=\"admin_ar_users.html\" class=\"topiclink\">users<\/a> are listed on one side. Select specific users or select all users using the <span class=\"f_UI\">Add All<\/span> button. Assigned users are listed on the other side. It is not mandatory to assign a user, you can do it later.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Summary<\/span><\/h2>\n\r<p class=\"p_Normal\">Review the settings configured for this competence and click <span class=\"f_UI\">Finish<\/span>. The permission set is stored in the Home Group of the user who created it.<\/p>\n\r<p class=\"p_Normal\">Click <span class=\"f_UI\">Save as<\/span> to create a new permission set based on the permission set you are editing. You will be required to type a name for the new permission set.<\/p>\n\r"
})
