Overview

This article describes the process to create additional security roles and grant permissions.

Note: Before you complete this procedure, make sure to be familiar with the topic of Configuring Permissions for Delegated Administration. Additionally, this procedure must be completed by a local administrator of the Surveyor server, who must be a member of the Root Administrator role in the Surveyor Administrator console.

 Process

1. In the Administrator Console, go to the Configure menu and click on Roles & Permissions.
2. Click on New Role, or select an existing role to customize or copy. If you create or copy a role, give the new role a name and description (see example below).
   

    

   

    

3. In the Users tab, for each Windows user or group that you want to include in the role, click Add User or Group to find and select the user. 
   
   Note: Search operations are limited to the current domain, even if your user account has access to multiple domains. If you specify a different domain, the search returns a user not found message.
   
   
4. Configure permissions for this role as you see fit. In the Group Permissions tab, expand the tree to display the groups that you want this role to have access to, and then select the appropriate permissions.
   
   Note: When you enable permissions on a group, they are also enabled on its subgroups.
    
5. In the Global Permissions tab, if you want this role to have access to policies or group assignment rules across the entire system (independent from group-level permissions), select the appropriate checkbox. Skip this step to grant only group-level permissions.
6. When you complete assigning permissions, click Save.