You are here: Home  >  Server Configuration  >  Configuring Server Administrators  >  Delegated Administration

For more information, scroll through the topics in the Index or review the topics in the table of contents to the left. If the Index and Contents are hidden, click <--Show Table of Contents.

Delegated Administration

EFT Server allows you to assign sub administrator accounts that have very specific/granular permissions to manage EFT Server, COM, Site(s), Settings Templates, user accounts, user passwords, and reports. Permissions are assigned to sub-administrators via a series of controls on EFT Server's Administration tab.

For example, suppose you want to give your help-desk people the ability to create user accounts on EFT Server, but you are worried that the help-desk might accidentally make changes to EFT Server in the process of creating these accounts. Furthermore, you do not want the help desk people to manage user accounts that belong to the engineering and marketing groups. In this example, delegated administration allows you to create one or more sub-administrator accounts that have access ONLY to user accounts management. Using templates to house marketing, engineering, and other department accounts, you can further limit the sub-administrators to only those accounts for departments that they are authorized to manage.

Each of the sub accounts can also be allowed access to COM and or Auditing and Reporting.

The available sub administrator account types include:

• Server Admin - Can create, modify, or remove administrator accounts, and can manage Sites, Settings Templates, and user accounts.

• Site Admin - Can manage everything for a specific Site and the Settings Templates on the Site, and can change user passwords, but does not have control over EFT Server. The Site administrator cannot click the Server node nor access any of the node's tabs; stop/start the GlobalSCAPE Server service from within the EFT Server administration interface; create, remove, or rename Sites, Servers, or Server Groups; access or modify EFT Server global or applet settings; close the Server engine; or stop/start any Site other than those assigned to the Site administrator.

• Template Settings Admin - (EFT Server Enterprise only) Has full control over the accounts assigned to that Setting Level, including the ability to view, add, remove, and modify user accounts, and group assignment; can change all Setting Level settings, except for the VFS root path for assigned Setting Levels; can see the entire VFS tree, but can only modify the parts of the VFS that belong to root folders that belong to the Setting Level to which the account is assigned; can access the General tab on EFT Server to view statistics; can kick and monitor users. They cannot access the Reports tab unless specifically allowed; cannot select the Site, Server, or Server Group nodes, nor view the corresponding tabs; cannot access Server settings, nor any Setting Level not assigned to their account. They can access the PGP, SFTP, and SSL key manager, and create, import, export, and add keys and certificates. They cannot delete keys or certificates.

• •  

• User Admin - (EFT Server Enterprise only) Has all the privileges of the Change Password administrator, but can also create new users. The User administrator is not allowed to see or edit users' settings or Template settings, and is limited to change password, disable user, or create more users.
  
  

• Change Passwords Admin - (EFT Server Enterprise only) Can enable/disable users and change passwords for users in their specified Settings Template(s), but cannot add nor remove users, manage other Settings Template(s), manage Sites, nor control EFT Server. When a Change User Password administrator logs in to EFT Server, only the view below is available.
  
  

Administrator Permission Matrix

Related Topics

Adding EFT Server Administrators

Changing an Administrator Password or Access Rights

Configuring Server Administrators