Configuring permissions sets

A permission set is a group of access rights granted to a user account for specific features of a product. Permission sets only grant permissions — they never remove a permission.

All permissions to all products and features are assigned automatically to global administrators. Other users must have permission assigned manually. Global administrators can assign existing permission sets when creating or editing user accounts and when creating or editing permission sets.

For more information on permission sets, see the product documentation for your version of McAfee ePO.

McAfee MOVE AntiVirus permission set

The McAfee MOVE AntiVirus software adds sections to the permission sets including the MOVE AntiVirus SVM Manager role.

Global administrators must grant permissions to users for the MOVE AntiVirus Common, MOVE AntiVirus Deployment, MOVE AntiVirus General, and MOVE AntiVirus Policy Permission sections, because no permissions are granted by default.

Permission section Permission set Description
MOVE AntiVirus Common View policy and task settings User can view the policy and task settings that are available under MOVE AntiVirus Common extension in McAfee ePO.
View and change policy and task settings User can view and edit the policy and task settings that are available under MOVE AntiVirus Common extension in McAfee ePO.
MOVE AntiVirus Deployment View/Edit Deployment MOVE AntiVirus Configuration User can view and edit the MOVE AntiVirus Deployment configuration details in McAfee ePO.
MOVE AntiVirus General Run System Tag Info Command This permission is used by the SVM Manager to fetch the system tag information which are configured and assigned to the client systems.
MOVE AntiVirus Policy Permission View policy and task settings User can view the policy and tasks settings that are available under MOVE AntiVirus extension in McAfee ePO.
View and change policy and task settings User can view and edit the policy and tasks settings under MOVE AntiVirus extension in McAfee ePO.

Other required permissions

The global administrator must give McAfee ePO permissions to handle other areas that work with McAfee MOVE AntiVirus including queries, dashboards, and the Threat Event Log.
For these features... These permissions sets are required
Dashboards Dashboards, Queries and Reports
Queries Queries and Reports
Policies System Tree access, Policy Assignment Rules
Events on virtual machines Systems, System Tree access, Threat Event Log