Configuring A Hosted User Account

When you add or edit a hosted user account from the Hosted Users screen, a new screen opens, where you can specify the settings for the account.

  1. Go to Administration > USERS & AUTHENTICATION > Hosted Users, and click Add or select an existing account name under Full Name.
  2. Configure the following:

    Item

    Details

    Full name

    Display name of the user account

    Email address

    Email address of the account owner. Select a domain in the second dropdown box to complete the email address. If no domain exists, add one and verify the domain ownership in Administration > USERS & AUTHENTICATION > Directory Services.

    This field cannot be edited once the account is created, and is view-only if you are editing an account.

    Role

    • User: Allows the account owner to forward web traffic to TMWS

      Do not allow this user to change the password: Optionally select this check box to prevent the user from modifying the password of the hosted user account. This ensures that the hosted user account is always available when it is shared among multiple people.

      Note:

      After a hosted user account of this type is exported and re-imported, it will become a normal user account whose password can be changed by the user.

    • Administrator: Grants the account owner access to the management console

    • Operator: Grants the account owner access to the management console with the following permissions:

      • View, customize, and manage the Dashboard.

      • View, query, and manage logs and reports except Cloud Syslog Forwarding and Log Consolidation.

      • View all configurations and data under Gateways, Policies, and Administration, but cannot perform operations on them.

      • Export configurations and data that provide an export operation, for example, raw logs, audit logs, approved and blocked URLs, and so on.

    Password

    Type a password and confirm it.

    Select group membership

    Select one or several groups from the group list. A hosted user can belong to one or multiple groups.

    To create a new group, type a group name in the Create new group text box and then click Create. The group is added in the group list. A maximum of 100 groups can be added.

    To delete an existing group, select it from the group list and then click Delete.

    You can leverage the groups you created when you configure policies (that is, you can subject all group members to the same policy). Therefore, Trend Micro recommends defining groups according to the various policies you wish to roll out in your organization.

    Select department membership

    Select a department from the drop-down list. A hosted user can belong to only one department.

    To create a new department, type a department name in the Create new department text box and then click Create. The department is added in the department list. A maximum of 100 departments can be added.

    To delete an existing department, select it from the drop-down list and then click Delete.

    TMWS uses information about departments in administrator alerts and in the dashboard.

  3. Click Save.

    The Hosted Users screen re-appears, showing details for the user account.