McAfee Data Loss Prevention 9.2.2 Product Guide

13Managing McAfee DLP systemsManaging users and groupsDelete user groupsDelete user groups that are not needed or no longer useful. Only administrators can delete usergroups.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Sys Config | User Administration | Groups.• On your McAfee DLP appliance, select System | User Administration | Groups.2 Click Details for the group to be deleted.3 From the Action menu, select Delete and click Go.4 Click OK to delete the group.Set permissionsPermissions are assigned through group membership. Administrators can customize group permissionsby adding specific policy and task permissions that individuals need to perform their tasks.Assign incident permissionsIn a role‐based access control systems, not all users have privileges to view all types of incidentsproduced by the McAfee DLP system.For example, as a member of the group responsible for reviewing evidence of non‐compliance withSOX policy, an accountant might have access only to incidents produced by the rules of that policy.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Sys Config | User Administration | Users.• On your McAfee DLP appliance, select System | User Administration | Users.2 Click Details for a user.3 Click Incident Permissions.4 Click Add.5 Select Reviewer, Rule, or Devicename from the drop‐down menu.6 Select an equals or not equals condition.7 Click ?.A palette containing the values available for the selection appears.8 Select one or more value checkboxes.9 Click Apply.Assign task and policy permissionsAll user rights are inherited from group affiliations. Assign permissions to individual users by addingthem to the appropriate groups.If group permissions are modified, all of its members will have to log out and re‐logon.276 McAfee Data Loss Prevention 9.2.2 Product Guide