Permissions
This section provides the complete list of permissions required by a CipherTrust Manager user to perform create, read, update, and delete operations on CTE resources.
Create Operations
| Operation | Required Permissions |
|---|---|
| Create CTE client | • CreateClientCTE • ReadClientCTE • ReadProfileCTE |
| Create STANDARD policy with existing policy elements and key | • ReadPolicyCTE • ReadSignatureSetCTE • ReadUserSetCTE • ReadProcessSetCTE • ReadResourceSetCTE • ReadSecurityRuleCTE • ReadClientAndResourceMappingReadCTE • CreatePolicyCTE • CreateKeyRuleCTE • ReadKeyMetaCTE • CreateKeyMetaCTE • UpdateKeyMetaCTE • CreateSecurityRuleCTE • ReadKeyRuleCTE • ReadKey |
| Create STANDARD policy with permission to create policy elements using existing key | • ReadPolicyCTE • ReadSignatureSetCTE • ReadUserSetCTE • ReadProcessSetCTE • ReadResourceSetCTE • ReadSecurityRuleCTE • ReadClientAndResourceMappingReadCTE • CreatePolicyCTE • CreateKeyRuleCTE • ReadKeyMetaCTE • CreateKeyMetaCTE • UpdateKeyMetaCTE • CreateSecurityRuleCTE • ReadKeyRuleCTE • ReadKey • CreateSignatureSetCTE • CreateUserSetCTE • CreateProcessSetCTE • CreateResourceSetCTE |
| Create client group | • CreateProfileCTE • ReadProfileCTE • CreateClientGroupCTE • ReadClientGroupCTE |
| Create signature set superset | • CreateSignatureSetCTE • ReadSignatureSetCTE • ReadClientCTE • CreateSignatureCTE • ReadSignatureCTE |
| Create user set superset | • CreateUserSetCTE • ReadUserSetCTE • ReadClientCTE |
| Create process set superset | • CreateProcessSetCTE • ReadProcessSetCTE • CreateProcessSetSignatureSetAssociationCTE • CreateSignatureSetCTE • ReadSignatureSetCTE • ReadClientCTE • CreateSignatureCTE • ReadSignatureCTE |
| Create resource set | • CreateResourceSetCTE • ReadResourceSetCTE • ReadClientCTE |
| Create CTE profile | • CreateProfileCTE • ReadProfileCTE |
| Create client group - client association | • CreateClientCTE • ReadClientCTE • UpdateClientCTE • CreateClientGroupCTE • ReadClientGroupCTE • UpdateClientGroupCTE • CreateClientGroupClientAssociationCTE • ReadClientGroupClientAssociationCTE • UpdateClientGroupClientAssociationCTE |
Update Operations
| Operation | Required Permissions |
|---|---|
| Update unregistered client Enable capabilities Reset CTE client password | • ReadClientCTE • UpdateClientCTE |
| Update authentication binaries for client and client group | • ReadClientCTE • UpdateClientCTE • ReadClientGroupCTE • UpdateClientGroupCTE |
| Update CTE policy | • ReadPolicyCTE • ReadSignatureSetCTE • ReadUserSetCTE • ReadProcessSetCTE • ReadResourceSetCTE • ReadSecurityRuleCTE • ReadClientAndResourceMappingReadCTE • CreatePolicyCTE • CreateKeyRuleCTE • ReadKeyMetaCTE • CreateKeyMetaCTE • UpdateKeyMetaCTE • CreateSecurityRuleCTE • ReadKeyRuleCTE • ReadKey • UpdatePolicyCTE • UpdateKeyRuleCTE • UpdateSecurityRuleCTE |
| Update client group | • ReadClientCTE • UpdateClientCTE • ReadClientGroupCTE • UpdateClientGroupCTE • CreateClientGroupClientAssociationCTE • ReadClientGroupClientAssociationCTE • UpdateClientGroupClientAssociationCTE |
| Update signature set | • ReadSignatureSetCTE • ReadClientCTE • CreateSignatureCTE • ReadSignatureCTE • UpdateSignatureSetCTE • UpdateSignatureCTE • ReadClientAndResourceMappingReadCTE |
| Update user set | • ReadUserSetCTE • UpdateUserSetCTE • ReadClientCTE • ReadClientAndResourceMappingReadCTE • ReadClientCTE |
| Update process set | • ReadCTEProcessSet • UpdateCTEProcessSet • CreateCTEProcessSetSignatureSetAssociation • ReadCTEClientAndResourceMappingRead • ReadClientCTE |
| Update resource set | • ReadResourceSetCTE • UpdateResourceSetCTE • ReadClientCTE • ReadCTEClientAndResourceMappingRead |
| Update client profile | • ReadProfileCTE • UpdateProfileCTE |
Read Operations
| Operation | Required Permissions |
|---|---|
| Read CTE client | • ReadClientCTE |
| Read CTE client and its profile | • ReadClientCTE • ReadProfileCTE |
| Read CTE policy | • ReadPolicyCTE • ReadCTEClientAndResourceMappingRead • ReadUserSetCTE • ReadProcessSetCTE • ReadResourceSet • ReadSecurityRuleCTE • ReadKeyRuleCTE |
| Read client group | • ReadClientGroupCTE |
| Read client group and its profile | • ReadClientGroupCTE • ReadProfileCTE |
| Get client group - client association | • ReadClientCTE • ReadClientGroupCTE • ReadClientGroupClientAssociationCTE |
| Read signature set | • ReadSignatureSetCTE |
| Read user set | • ReadUserSetCTE |
| Read process set | • ReadProcessSetCTE |
| Read resource set | • ReadResourceSetCTE |
| Read signature | • ReadSignatureCTE |
| Read CTE profile | • ReadProfileCTE |
| Read all reports | • ReadClientsReportCTE • ReadClientsKeysReportCTE • ReadClientsProfileReportCTE • ReadClientsGuardStatusReportCTE • ReadPolicyKeysReportCTE • ReadClientsPoliciesReportCTE • ReadGuardPointsReportCTE |
Delete Operations
| Operation | Required Permissions |
|---|---|
| Delete CTE client | • ReadClientCTE • DeleteClientCTE • ReadClientGroupClientAssociationCTE |
| Unenroll CTE client | • ReadClientCTE • UpdateClientCTE • ReadClientsPoliciesReportCTE |
| Delete CTE policy | • DeletePolicyCTE • ReadPolicyCTE |
| Delete client group | • ReadClientGroupCTE • DeleteClientGroupCTE |
| Delete signature set | • ReadSignatureSetCTE • DeleteSignatureSetCTE |
| Delete user set | • ReadUserSetCTE • DeleteUserSetCTE |
| Delete process set | • ReadProcessSetCTE • DeleteProcessSetCTE |
| Delete resource set | • ReadResourceSetCTE • DeleteResourceSetCTE |
| Delete CTE profile | • ReadProfileCTE • DeleteProfileCTE |
