Views:

Deep Discovery Email Inspector has a default administrator account ("admin") that has full administrative access.

The default administrator account can perform the following tasks:

  • Add new administrator accounts

  • Lock or unlock an account

Accounts assigned the administrative role can create additional accounts and assign these accounts the Administrator role or the Operator role. Administrators can delegate tasks to different administrators and operators to reduce bottlenecks in Deep Discovery Email Inspector administration.

Administrator accounts can additionally edit or delete existing accounts.

Parent topic: Accounts / Contacts

Account Role Classifications

Role

Description

Administrator

Users have complete access to the features and settings contained in the menu items.

  • Dashboard

  • Detections

  • Policies

  • Alerts / Reports

  • Logs

  • Administration

  • Help

Investigator

Users can view certain features and settings contained in the menu items, but cannot make any administrative modifications.

  • Dashboard

  • Detections

  • Alerts / Reports > Reports > Generated Reports

  • Alerts / Reports > Alerts > Triggered Alerts

  • Logs

  • Help

Operator

Users can view certain features and settings contained in the menu items, but cannot make any administrative modifications.

  • Dashboard

  • Detections (no access to message body)

  • Alerts / Reports > Reports > Generated Reports

  • Alerts / Reports > Alerts > Triggered Alerts

  • Logs

  • Help

Adding a Local User Account

  1. Go to Administration > Accounts / Contacts > Accounts.
  2. Click Add.

    The Add Account screen appears.

  3. Toggle the Status of this account.
  4. Select Local user from the Type drop-down list.
  5. Specify the account user name and password.
  6. Select a Role for this account. The role determines the level of access this account has.

    See Account Role Classifications.

  7. Click Save.

    The new account is added to the Accounts list.

Adding an Active Directory User Account or Group

Note:

Microsoft Active Directory settings have to be configured before an Active Directory user account or group can be added.

For details, see LDAP.

  1. Go to Administration > Accounts / Contacts > Accounts.
  2. Click Add.

    The Add Account screen appears.

  3. Toggle the Status of this account.
  4. Select LDAP user or group as the Type for this account.
  5. Type a user or group name and click Search to search the LDAP server for matching user accounts or groups.

    Matching user accounts and groups are displayed in the results table.

    Note:

    User accounts are not displayed in the results table if:

    • The user account's User Principle Name (UPN) is not specified on the LDAP server

    • The user account is disabled on the LDAP server

  6. Select the LDAP user account or group to add.
  7. Select a Role for this account. The role determines the level of access this account has.

    See Account Role Classifications.

  8. Click Save.

    The new account is added to the Accounts list.

Editing Accounts

Change account permissions to adjust settings for a role revision or other organizational changes.

  1. Go to Administration > Accounts / Contacts > Accounts.
  2. Click the account name hyperlink.
  3. Make the required changes.
  4. Click Save.

Deleting Accounts

Delete accounts to adjust settings for a role revision or other organizational changes.

Note:

You can only delete custom accounts. You cannot delete the default Deep Discovery Email Inspector administrator account.

  1. Go to Administration > Accounts / Contacts > Accounts.
  2. Select the account to remove.
  3. Click Delete.
  4. At the confirmation message, click OK.

Unlocking a Locked Account

Deep Discovery Email Inspector automatically locks an account after five unsuccessful logon attempts. You can use ad administrator account to manually unlock the account.

Note:

If an account is locked, the user can log in again after 10 minutes and Deep Discovery Email Inspector will unlock the account. The account remains locked if the user does not try to log in again after 10 minutes.

  1. Go to Administration > Accounts / Contacts > Accounts.
  2. Select a locked account.
  3. Click Unlock.