Adding Administrator Accounts

You can create additional administrator accounts if more than one person is responsible for managing policy and you want each person to have individual login credentials. Only the “primary” administrator-whose default name of admin cannot be changed-can create, modify, and delete secondary administrator accounts.

Before creating administrator accounts it is important to define the authentication server first to authenticate the administrator accounts. See Adding Authentication Server.

By default, the preconfigured roles include the ability to view all forms of session data and to terminate sessions. See Viewing User Sessions and Ending User Sessions for more information.

To add an administrator account

1. In the AMC, navigate to System Configuration > General Settings.

   

2. In the Administrator accounts section under Administrators, click Edit.

   The Administrators page displays.

   

3. Click the + (New) icon.

   The Add Administrator page displays.

   

4. In the User drop-down menu, select a user.

5. Select an Administrator Role from the Role drop-down menu. AMC provides preconfigured roles, which are defined on the Add Administrator Role page; see Preconfigured role descriptions. You can modify these preconfigured roles, or create new roles (see Defining Administrator Roles):

   By default, the preconfigured roles include the ability to view all forms of session data and to terminate sessions. See Viewing User Sessions and Ending User Sessions for more information.

   Preconfigured role descriptions

   Preconfigured role	Description
   Super Admin	Has read/write access to all pages in AMC
   Security Admin	Has read/write access to security administration and monitoring pages in AMC, and view access to system settings
   System Admin	Has read/write access to system and monitoring pages, and view access to security pages

6. Click Save.

7. Click Pending changes at the top of the page.

   The Apply Pending Changes dialog displays.

   

8. Click Apply Changes.