Welcome to
Help Desk

Product Updates
Training
Support
Ideas Contact Support

Secure & Govern - RBAC Fine-Grained Role Entitlements

Secure & Govern Role-Based Access Control (RBAC) now supports fine-grained role entitlements. One of the most significant benefits of fine-grained access control is that it allows for varying degrees of access. Administrators can now restrict access and delegate specific responsibilities to other users.

 

Predefined Default Roles

Egnyte Secure & Govern supports five predefined default roles: Admin Role, Basic User Role, Power User Role, Data Owner Role and Basic Viewer Role. These are the most commonly used roles in most organizations. The entitlements of these roles have been predefined and can be directly assigned to individual users. The role hierarchy and entitlements are briefly described below

  • Admin Role has full access including all the privileges and permissions for the entire system.
  • Power User Role has limited access to the issues, permissions and sensitive content views. These users can only see folders where they are folder owners in a content source.
  • Basic User Role has limited access and only has access to the issues View
  • Data Owner Role has limited access to permissions and sensitive content views. These users will only be able to see folders where assigned as Data Owner.
  • Basic Viewer Role is the most restrictive role. Users will have the ability to log into Secure & Govern and only allows users to comment on issues they are assigned

For more information on the Data Owner option, see Data Owner Management.

 

Custom Roles 

With Custom Role, administrators can grant precise privileges based on each user's responsibilities and business needs.

 

Fine-Grained Role Entitlements

Administrators now have more fine-grained control over all user entitlements. The entitlements available, for each Secure & Govern product segment/view, are described below.

There is an on/off toggle switch for each product segment/view. When the toggle is turned off, the role will have no entitlements to access the product segment/view. 

Issue Entitlements

S&G - issue entitlements - enabled.png 

User See Options:

  • All Issues
  • Assigned issues and issues from locations where assigned as a Data owner or have permissions to
  • Assigned issues and issues from locations where assigned as a Data owner or have Owner permissions to
  • Assigned issues and issues from locations where assigned as a Data owner
  • Issues they are assigned

Sensitive Content Entitlements

sensitive content entitlements.png

User See Options:

  • All Sensitive Content
  • Only where they have permissions or assigned as a Data Owner
  • Only where they have Owner permissions or assigned as a Data Owner
  • Only where assigned as a Data Owner

Permissions Entitlements

permission entitlements.png

User See Options:

  • Permissions in all folders
  • Permissions in folders they have access to or assigned as a Data Owner
  • Permissions in folders they own and where they are Data Owners
  • Permissions in folders where they are Data Owners

Data Owner Entitlements

Data owner entitlements.png

User See Options:

  • See Data Owners

Content Lifecycle Entitlements

S&G - content lifecycle entitlements.png

User See Options:

  • Details of Content Lifecycle in all folders

Legal Hold Entitlements

Legal hold entitlements.png

User See Options:

  • All Legal Holds
  • Legal Holds created by themselves

Compliance Entitlements

compliance entitlements.png

User See Options:

  • Breach Reports
  • Subject Access Requests

Content Safeguard Entitlements

content safeguard entitlements.png

User see Options:

  • All Content Safeguard policies

Egnyte to Egnyte Connector Entitlements

egnyte to egnyte connecor entitlements.png

User see Options:

  • All Egnyte to Egnye Connections

Other Entitlements

other entitlements.png

User see Options:

  • Content Sources
  • Alerts
  • Audit Reports
  • User Management

 

Additional Resources

Back to Top

 

Was this article helpful?
0 out of 0 found this helpful

For technical assistance, please contact us.