Permissions
This section provides the complete list of permissions required by a CipherTrust Manager user to perform create, read, update, and delete operations on CTE resources.
Create Operations
| Operation | Required Permissions |
|---|---|
| Create CTE client | • CreateClientCTE • ReadClientCTE • ReadProfileCTE |
| Create STANDARD policy with existing policy elements and key |
• ReadPolicyCTE • ReadSignatureSetCTE • ReadUserSetCTE • ReadProcessSetCTE • ReadResourceSetCTE • ReadSecurityRuleCTE • ReadClientAndResourceMappingReadCTE • CreatePolicyCTE • CreateKeyRuleCTE • ReadKeyMetaCTE • CreateKeyMetaCTE • UpdateKeyMetaCTE • CreateSecurityRuleCTE • ReadKeyRuleCTE • ReadKey |
Create STANDARD policy with permission to
create policy elements using existing key |• ReadPolicyCTE
• ReadSignatureSetCTE
• ReadUserSetCTE
• ReadProcessSetCTE
• ReadResourceSetCTE
• ReadSecurityRuleCTE
• ReadClientAndResourceMappingReadCTE
• CreatePolicyCTE
• CreateKeyRuleCTE
• ReadKeyMetaCTE
• CreateKeyMetaCTE
• UpdateKeyMetaCTE
• CreateSecurityRuleCTE
• ReadKeyRuleCTE
• ReadKey
• CreateSignatureSetCTE
• CreateUserSetCTE
• CreateProcessSetCTE
• CreateResourceSetCTE
Create client group |• CreateProfileCTE
• ReadProfileCTE
• CreateClientGroupCTE
• ReadClientGroupCTE
Create signature set superset |• CreateSignatureSetCTE
• ReadSignatureSetCTE
• ReadClientCTE
• CreateSignatureCTE
• ReadSignatureCTE
Create user set superset |• CreateUserSetCTE
• ReadUserSetCTE
• ReadClientCTE
Create process set superset |• CreateProcessSetCTE
• ReadProcessSetCTE
• CreateProcessSetSignatureSetAssociationCTE
• CreateSignatureSetCTE
• ReadSignatureSetCTE
• ReadClientCTE
• CreateSignatureCTE
• ReadSignatureCTE
Create resource set |• CreateResourceSetCTE
• ReadResourceSetCTE
• ReadClientCTE
Create CTE profile |• CreateProfileCTE
• ReadProfileCTE
Create client group - client association |• CreateClientCTE
• ReadClientCTE
• UpdateClientCTE
• CreateClientGroupCTE
• ReadClientGroupCTE
• UpdateClientGroupCTE
• CreateClientGroupClientAssociationCTE
• ReadClientGroupClientAssociationCTE
• UpdateClientGroupClientAssociationCTE
Update Operations
| Operation | Required Permissions |
|---|---|
| Update unregistered client Enable capabilities Reset CTE client password |
• ReadClientCTE • UpdateClientCTE |
| Update authentication binaries for client and client group |
• ReadClientCTE • UpdateClientCTE • ReadClientGroupCTE • UpdateClientGroupCTE |
| Update CTE policy | • ReadPolicyCTE • ReadSignatureSetCTE • ReadUserSetCTE • ReadProcessSetCTE • ReadResourceSetCTE • ReadSecurityRuleCTE • ReadClientAndResourceMappingReadCTE • CreatePolicyCTE • CreateKeyRuleCTE • ReadKeyMetaCTE • CreateKeyMetaCTE • UpdateKeyMetaCTE • CreateSecurityRuleCTE • ReadKeyRuleCTE • ReadKey • UpdatePolicyCTE • UpdateKeyRuleCTE • UpdateSecurityRuleCTE |
| Update client group | • ReadClientCTE • UpdateClientCTE • ReadClientGroupCTE • UpdateClientGroupCTE • CreateClientGroupClientAssociationCTE • ReadClientGroupClientAssociationCTE • UpdateClientGroupClientAssociationCTE |
| Update signature set | • ReadSignatureSetCTE • ReadClientCTE • CreateSignatureCTE • ReadSignatureCTE • UpdateSignatureSetCTE • UpdateSignatureCTE • ReadClientAndResourceMappingReadCTE |
| Update user set | • ReadUserSetCTE • UpdateUserSetCTE • ReadClientCTE • ReadClientAndResourceMappingReadCTE • ReadClientCTE |
| Update process set | • ReadCTEProcessSet • UpdateCTEProcessSet • CreateCTEProcessSetSignatureSetAssociation • ReadCTEClientAndResourceMappingRead • ReadClientCTE |
| Update resource set | • ReadResourceSetCTE • UpdateResourceSetCTE • ReadClientCTE • ReadCTEClientAndResourceMappingRead |
| Update client profile | • ReadProfileCTE • UpdateProfileCTE |
Read Operations
| Operation | Required Permissions |
|---|---|
| Read CTE client | • ReadClientCTE |
| Read CTE client and its profile | • ReadClientCTE • ReadProfileCTE |
| Read CTE policy | • ReadPolicyCTE • ReadCTEClientAndResourceMappingRead • ReadUserSetCTE • ReadProcessSetCTE • ReadResourceSet • ReadSecurityRuleCTE • ReadKeyRuleCTE |
| Read client group | • ReadClientGroupCTE |
| Read client group and its profile | • ReadClientGroupCTE • ReadProfileCTE |
| Get client group - client association | • ReadClientCTE • ReadClientGroupCTE • ReadClientGroupClientAssociationCTE |
| Read signature set | • ReadSignatureSetCTE |
| Read user set | • ReadUserSetCTE |
| Read process set | • ReadProcessSetCTE |
| Read resource set | • ReadResourceSetCTE |
| Read signature | • ReadSignatureCTE |
| Read CTE profile | • ReadProfileCTE |
Read all reports |• ReadClientsReportCTE
• ReadClientsKeysReportCTE
• ReadClientsProfileReportCTE
• ReadClientsGuardStatusReportCTE
• ReadPolicyKeysReportCTE
• ReadClientsPoliciesReportCTE
• ReadGuardPointsReportCTE
Delete Operations
| Operation | Required Permissions |
|---|---|
| Delete CTE client | • ReadClientCTE • DeleteClientCTE • ReadClientGroupClientAssociationCTE |
| Unenroll CTE client | • ReadClientCTE • UpdateClientCTE • ReadClientsPoliciesReportCTE |
| Delete CTE policy | • DeletePolicyCTE • ReadPolicyCTE |
| Delete client group | • ReadClientGroupCTE • DeleteClientGroupCTE |
| Delete signature set | • ReadSignatureSetCTE • DeleteSignatureSetCTE |
| Delete user set | • ReadUserSetCTE • DeleteUserSetCTE |
| Delete process set | • ReadProcessSetCTE • DeleteProcessSetCTE |
| Delete resource set | • ReadResourceSetCTE • DeleteResourceSetCTE |
| Delete CTE profile | • ReadProfileCTE • DeleteProfileCTE |