User roles
A user role consists in a specific combination of user rights. When creating a user account, you can choose one of the predefined roles or you can create a custom role, by selecting certain user rights only.
Note
You can grant user accounts the same privileges as your account, or lesser.
The following user roles are available:
Partner - Suited for GravityZone distributors and resellers. Users with partner accounts can create and manage other companies. When expanding their distribution chain, they create subordinate partner company accounts. When selling directly to end-users, they create customer company accounts. Partner users can manage the licenses of their subordinate companies and also manage user accounts linked to these companies. Since partners can act as security service providers, they have administrative privileges over security settings for their children customer accounts. Partner user accounts can also manage the security of their own company.
Company Administrator - Suited for managers of customer companies that have purchased a GravityZone license from a partner. A company administrator manages the license, the company's profile and its entire GravityZone deployment, allowing top-level control over all security settings (unless overridden by its parent partner account in a security service provider scenario). Company administrators can share or delegate their operational responsibilities to subordinate administrator and security analyst user accounts.
Network Administrator - Several accounts with Network Administrator role can be created for each subordinate company, with administrative privileges over one or several companies' entire security agents deployment or over a specific group of endpoints, including user management. Network Administrators are responsible for actively managing the network security settings.
Security Analyst - Security Analyst accounts are read-only accounts. They only allow access to security-related data, reports and logs. Such accounts can be allocated to personnel with security monitoring responsibilities or to other employees who must be kept up-to-date with security status.
Custom - Predefined user roles include a certain combination of user rights. If a predefined user role does not fit your needs, you can create a custom account by selecting only the rights that you are interested in.
The following table summarizes the relationships between different account roles and their rights. For detailed information, refer to User rights.
Account role | Allowed child accounts | User rights |
|---|---|---|
Partner | Partner Company Administrators Network Administrators Security Analysts | Manage companies Manage users Manage company Manage networks View and analyze data Advanced investigation |
Company Administrator | Company Administrators Network Administrators Security Analysts | Manage company Manage users Manage networks View and analyze data Advanced investigation |
Network Administrator | Network Administrators Security Analysts | Manage users Manage networks View and analyze data |
Security Analysts | - | View and analyze data |