Chat now with support
Chat with Support

Enterprise Single Sign-On 8.0.6 - Quest ESSO Console Administrator Guide

1. Overview 2 Authenticating to Quest ESSO Console and Managing Protection Modes 3 Searching the Directory Tree 4 Managing Administrators 5 Managing Security Profiles
5.1 Managing Time Slices 5.2 Managing Password Format Control Policies 5.3 Managing User Security Profiles 5.4 Managing Access Point Security Profiles 5.5 Managing Application Security Profiles 5.6 Defining Security Profiles Default Values 5.7 Managing User and Access Point Security Profiles Priorities
6 Managing Directory Objects
6.1 Managing Applications 6.2 Managing Users 6.3 Managing Access Points 6.4 Managing Representative Objects 6.5 Managing Clusters of Access Points 6.6 Selecting a Domain Controller
7 Importing/Exporting Security Profiles and Directory Objects 8 Managing Smart Cards
8.1 Assigning Smart Cards to Users 8.2 Formatting Smart Cards 8.3 Forcing a new PIN 8.4 Disabling Temporarily Smart Cards 8.5 Unlocking Smart Cards 8.6 Sending Smart Cards to a Blacklist 8.7 Extending the Validity of a Smart Card 8.8 Allowing Users to Renew their Smart Card Certificates 8.9 Displaying Smart Card Properties 8.10 Displaying the List of Supported Smart Cards 8.11 Managing Smart Card Configuration Profiles 8.12 Managing Loan Cards 8.13 Managing Smart Cards' Authentication Parameters 8.14 Managing Batches of Smart Cards
9 Managing SA Server Devices 10 Managing RFID Tokens 11 Managing Biometric Enrolment 13 Enabling the Public Key Authentication Method 14 Managing the Emergency Plan 15 Managing Audit Events 16 Managing Reports 17 Customizing Configuration Files 18 Creating Scripts Appendix A: Regular Expressions - Basic Syntax Appendix B: Listing Audit Events and Error Codes Appendix C: Correspondence Between Profile and Administration Rights

4.3 Managing Administration Profiles

An administration profile is a set of administration rights. Quest ESSO Console used in advanced administration mode allows you to define your own administration profiles by selecting a number of administration rights.
This functionality is only available if you use Quest ESSO Console in advanced administration mode.

4.3.1 Creating/Editing an Administration Profile

In the Administration profile tab, in the Administration role area, click the Add button.
The Administration profile edition window appears.
In the Administration profile name field, type a name for the administration profile you are creating or modifying.
Administration Profile Window Description
Scope of the administration profile: all the objects on which the administration profile applies.
This field allows you to define the organizations that must be assigned to the administrator at the same time as the administration profile.
The button allows you to select in the directory the perimeter of the administration profile, by browsing the directory or by executing a search request.
The Clear button removes the organization from the field.
List of all available Quest ESSO administration rights that you can add in the administration profile.
IMPORTANT: You cannot add to the profile an administration right that you do not already own.
Add button
Remove button

4.3.2 Deleting an Administration Profile

In the Administration profile tab, in the Administration role area, click the Add button.

4.4 Transferring an Administration Role

In the Directory panel, select the administrator for which you want to transfer the administration role.
In the Administration tab, click Transfer.
Select the user for which you want to transfer the administration role of the selected administrator: Use the Browse tab to browse the directory tree structure or use the Search tab to find the user according to its name.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating