Stormshield SN series - Page 33

The list of privileges that can be assigned in simple view are:
Privileges in simple view
Name Description Rights
System Privilege to perform maintenance operations (backups,
restorations, updates, Firewall shutdown and reboot, antivirus
update, modification of antivirus update frequency and RAID-
related actions in the monitor)
Privilege to modify Object database
modify, base,
maintenance,
object
Network Privilege to modify filtering policy configuration and routing
configuration(default route, static routes and trusted networks)
modify, base,
filter, route
Users Privilege to modify Users and PKI modify, base,
user, pki
Firewall Privilege to modify VPN configuration, Intrusion prevention (IPS)
configuration and vulnerability management
modify, base,
vpn, asq, pvm
Monitoring Privilege to modify configuration from Stormshield Network
Realtime Monitor and log configuration
modify, base,
log,
maintenance
Privileges in advanced view
Name Description Rights
Logs (R) Log consultation base, log_read
Filter (R) Filter policy consultation base, filter_
read
VPN (R) VPN configuration consultation base, vpn_read
Logs (W) Privilege to modify log configuration modify, base,
log
Filter (W) Privilege to modify filter policy configuration modify, base,
filter
VPN (W) Privilege to modify VPN configuration modify, base,
vpn
Monitoring Privilege to modify configuration from Stormshield Network Realtime
Monitor
modify, base,
mon_write
Content filtering Privilege for URL filtering, Mail, SSL and antivirus management modify, base,
contentfilter
PKI Privilege to modify PKI modify, base,
pki
Objects Privilege to modify Object database modify, base,
object
Users Privilege to modify Users modify, base,
user
Network Privilege to modify network configuration(interfaces, bridges, dialups,
VLANs and dynamic DNS configuration)
modify, base,
network
Routing Privilege to modify routing(default route, static routes and trusted
networks)
modify, base,
route
Maintenance Privilege to perform maintenance operations (backups, restorations,
updates, Firewall shutdown and reboot, antivirus update, modification
of antivirus update frequency and RAID-related actions in Stormshield
Network Realtime Monitor)
modify, base,
maintenance
Intrusion prevention Privilege to modify Intrusion prevention (IPS) configuration modify, base,
asq
Page 33/448 sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SNS - USER CONFIGURATION MANUAL V.3
ADMINISTRATORS