Scope of Operations

With SonicWall Endpoint Security, you can perform Endpoint Security operations at a defined scope of operation based on the permissions.

• Account
• Tenant
• Groups
• Multi-Tier Hierarchy of Scope of Operations

Account

Scope	Description
Account	An account is a container for multiple tenants. It can be used to define global policies to be applied across various tenants managed by the same organization - as is typical of Managed Services Providers (MSPs) or Partners. A tenant can be part of an account, and an account can have multiple tenants.

By default, all tenants and groups will be created within a SonicWall-managed account.

Tenant

Scope	Description
Tenant	The tenant concept represents a single end customer with a defined set of endpoint licenses. Tenants may have one or more groups. They can be created and managed in the MSW account.

By default, all tenants will be created within a SonicWall-managed account and can be managed in the MSW account.

Groups

Scope	Description
Group	The concept of a group represents a grouping of static or dynamic endpoints. Static groups are manual group creations. For more information about Static groups and creating group, refer to the section Static Groups in the Tenant View.

By default, all groups will be created within a tenant and can be created and managed in the SES Management Console.

Multi-tier Hierarchy of scope of operations

With SonicWall Endpoint Security, there is a multi-tier hierarchy of scope of operations. By selecting a scope, the operations will be made specific to the Account, Tenant, or Group.

• If the current scope is set to Account, then the Account Admin should only see data for all Endpoints across all Tenants in the selected Account.
• If the current scope is set to Tenant, then the Tenant Admin should only see data for Endpoints in that Tenant.
• If the current scope is set to Group, the logged -in User should only see data for Endpoints in that Group.

Policies & Settings can be modified at the Account, Tenant, and Group Scopes.

• Policies can be inherited or customized. Groups will inherit from Tenant, and Tenants will inherit from Account. Inherited policies are updated whenever the parent scope is modified.
• Inheritance is "Additive" - meaning Tenant inherits settings from Account, and Groups inherit settings from Account and Tenant.
• Inheritance can be enabled or disabled for all Policy Types.