Permissions
This section provides the complete list of permissions required by a CipherTrust Manager user to perform create, read, update, and delete operations on CTE resources.
Create Operations
Operation | Required Permissions |
---|---|
Create CTE client | • CreateClientCTE • ReadClientCTE • ReadProfileCTE |
Create STANDARD policy with existing policy elements and key | • ReadPolicyCTE • ReadSignatureSetCTE • ReadUserSetCTE • ReadProcessSetCTE • ReadResourceSetCTE • ReadSecurityRuleCTE • ReadClientAndResourceMappingReadCTE • CreatePolicyCTE • CreateKeyRuleCTE • ReadKeyMetaCTE • CreateKeyMetaCTE • UpdateKeyMetaCTE • CreateSecurityRuleCTE • ReadKeyRuleCTE • ReadKey |
Create STANDARD policy with permission to
create policy elements using existing key |• ReadPolicyCTE
• ReadSignatureSetCTE
• ReadUserSetCTE
• ReadProcessSetCTE
• ReadResourceSetCTE
• ReadSecurityRuleCTE
• ReadClientAndResourceMappingReadCTE
• CreatePolicyCTE
• CreateKeyRuleCTE
• ReadKeyMetaCTE
• CreateKeyMetaCTE
• UpdateKeyMetaCTE
• CreateSecurityRuleCTE
• ReadKeyRuleCTE
• ReadKey
• CreateSignatureSetCTE
• CreateUserSetCTE
• CreateProcessSetCTE
• CreateResourceSetCTE
Create client group |• CreateProfileCTE
• ReadProfileCTE
• CreateClientGroupCTE
• ReadClientGroupCTE Create signature set superset |• CreateSignatureSetCTE
• ReadSignatureSetCTE
• ReadClientCTE
• CreateSignatureCTE
• ReadSignatureCTE Create user set superset |• CreateUserSetCTE
• ReadUserSetCTE
• ReadClientCTE Create process set superset |• CreateProcessSetCTE
• ReadProcessSetCTE
• CreateProcessSetSignatureSetAssociationCTE
• CreateSignatureSetCTE
• ReadSignatureSetCTE
• ReadClientCTE
• CreateSignatureCTE
• ReadSignatureCTE Create resource set |• CreateResourceSetCTE
• ReadResourceSetCTE
• ReadClientCTE Create CTE profile |• CreateProfileCTE
• ReadProfileCTE
Create client group - client association |• CreateClientCTE
• ReadClientCTE
• UpdateClientCTE
• CreateClientGroupCTE
• ReadClientGroupCTE
• UpdateClientGroupCTE
• CreateClientGroupClientAssociationCTE
• ReadClientGroupClientAssociationCTE
• UpdateClientGroupClientAssociationCTE
Update Operations
Operation | Required Permissions |
---|---|
Update unregistered client Enable capabilities Reset CTE client password | • ReadClientCTE • UpdateClientCTE |
Update authentication binaries for client and client group | • ReadClientCTE • UpdateClientCTE • ReadClientGroupCTE • UpdateClientGroupCTE |
Update CTE policy | • ReadPolicyCTE • ReadSignatureSetCTE • ReadUserSetCTE • ReadProcessSetCTE • ReadResourceSetCTE • ReadSecurityRuleCTE • ReadClientAndResourceMappingReadCTE • CreatePolicyCTE • CreateKeyRuleCTE • ReadKeyMetaCTE • CreateKeyMetaCTE • UpdateKeyMetaCTE • CreateSecurityRuleCTE • ReadKeyRuleCTE • ReadKey • UpdatePolicyCTE • UpdateKeyRuleCTE • UpdateSecurityRuleCTE |
Update client group | • ReadClientCTE • UpdateClientCTE • ReadClientGroupCTE • UpdateClientGroupCTE • CreateClientGroupClientAssociationCTE • ReadClientGroupClientAssociationCTE • UpdateClientGroupClientAssociationCTE |
Update signature set | • ReadSignatureSetCTE • ReadClientCTE • CreateSignatureCTE • ReadSignatureCTE • UpdateSignatureSetCTE • UpdateSignatureCTE • ReadClientAndResourceMappingReadCTE |
Update user set | • ReadUserSetCTE • UpdateUserSetCTE • ReadClientCTE • ReadClientAndResourceMappingReadCTE • ReadClientCTE |
Update process set | • ReadCTEProcessSet • UpdateCTEProcessSet • CreateCTEProcessSetSignatureSetAssociation • ReadCTEClientAndResourceMappingRead • ReadClientCTE |
Update resource set | • ReadResourceSetCTE • UpdateResourceSetCTE • ReadClientCTE • ReadCTEClientAndResourceMappingRead |
Update client profile | • ReadProfileCTE • UpdateProfileCTE |
Read Operations
Operation | Required Permissions |
---|---|
Read CTE client | • ReadClientCTE |
Read CTE client and its profile | • ReadClientCTE • ReadProfileCTE |
Read CTE policy | • ReadPolicyCTE • ReadCTEClientAndResourceMappingRead • ReadUserSetCTE • ReadProcessSetCTE • ReadResourceSet • ReadSecurityRuleCTE • ReadKeyRuleCTE |
Read client group | • ReadClientGroupCTE |
Read client group and its profile | • ReadClientGroupCTE • ReadProfileCTE |
Get client group - client association | • ReadClientCTE • ReadClientGroupCTE • ReadClientGroupClientAssociationCTE |
Read signature set | • ReadSignatureSetCTE |
Read user set | • ReadUserSetCTE |
Read process set | • ReadProcessSetCTE |
Read resource set | • ReadResourceSetCTE |
Read signature | • ReadSignatureCTE |
Read CTE profile | • ReadProfileCTE |
Read all reports |• ReadClientsReportCTE
• ReadClientsKeysReportCTE
• ReadClientsProfileReportCTE
• ReadClientsGuardStatusReportCTE
• ReadPolicyKeysReportCTE
• ReadClientsPoliciesReportCTE
• ReadGuardPointsReportCTE
Delete Operations
Operation | Required Permissions |
---|---|
Delete CTE client | • ReadClientCTE • DeleteClientCTE • ReadClientGroupClientAssociationCTE |
Unenroll CTE client | • ReadClientCTE • UpdateClientCTE • ReadClientsPoliciesReportCTE |
Delete CTE policy | • DeletePolicyCTE • ReadPolicyCTE |
Delete client group | • ReadClientGroupCTE • DeleteClientGroupCTE |
Delete signature set | • ReadSignatureSetCTE • DeleteSignatureSetCTE |
Delete user set | • ReadUserSetCTE • DeleteUserSetCTE |
Delete process set | • ReadProcessSetCTE • DeleteProcessSetCTE |
Delete resource set | • ReadResourceSetCTE • DeleteResourceSetCTE |
Delete CTE profile | • ReadProfileCTE • DeleteProfileCTE |