Use the Reports tab to specify folder for storing log files of the Defender Security Servers deployed in your environment. These log files are used to generate Defender reports. Use the DSS logs location text box to type the local or UNC path to the log files.
A portal role defines the actions available to the role holder in the Defender Management Portal. You can assign the following portal roles to users:
The next table provides information about the actions that a particular role allows its holder to perform in the Defender Management Portal. For instructions on how to assign portal roles to users, see Configuring the portal.
|
Action |
Administrator |
Helpdesk |
Read-Only Helpdesk |
Reports |
|
View authentication statistics on the Dashboard |
Yes |
Yes |
Yes |
No |
|
Configure Defender Management Portal |
Yes |
No |
No |
No |
|
View Defender Security Server logs and warnings |
Yes |
Yes |
Yes |
No |
|
View token requests from users |
Yes |
No |
No |
No |
|
Configure self-service for users |
Yes |
No |
No |
No |
|
Use Helpdesk to diagnose authentication issues |
Yes |
Yes |
Yes |
No |
|
Use Helpdesk to resolve authentication issues |
Yes |
Yes |
No |
No |
|
Manage users |
Yes |
No |
No |
No |
|
Manage security tokens |
Yes |
No |
No |
No |
|
View Defender reports |
Yes |
No |
No |
Yes |
By default, the Defender Management Portal is configured to use form-based authentication. As a result, the users need to supply their credentials to sign in to the portal. However, you can enable automatic sign-in for the portal users who are already logged on to the Active Directory domain where the Defender Management Portal is installed.
To enable the automatic sign-in, use IIS Manager to disable anonymous authentication in the Defender Management Portal Web site settings.
To enable automatic sign-in to the portal
With anonymous authentication disabled, when users access the Defender Management Portal, they are automatically signed in with their Windows credentials. When an administrator accesses the Defender Management Portal, the user name and domain name are entered on the sign-in page automatically — only the password is required.
The Defender Management Portal provides a self-service Web site to users. This site is called the Defender Self-Service Portal. On the Defender Self-Service Portal, users can register their hardware tokens and request, download, and activate software tokens without the need to contact system administrator.
When you sign in to the Defender Management Portal as a portal administrator, you can configure all of the Defender Self-Service Portal settings. For example, you can set up a list of users who are allowed to request software tokens and register hardware tokens via the Defender Self-Service Portal, choose the tokens that users can request or register, select a method for verifying users who request or register tokens, select a method for delivering token activation information to the users, and more.
To configure self-service
© 2024 One Identity LLC. ALL RIGHTS RESERVED. 利用規約 プライバシー Cookie Preference Center
