Manage roles

In Kaspersky MLAD, you can use common roles to restrict user access to application functions depending on the tasks performed by specific users.

Role management is available to system administrators.

A role is a set of rights to access application functions that you can assign to a user.

Accounts with the following roles can be used to access application functions:

• The system administrator role is created automatically during installation of the application. The system administrator role is automatically assigned to the first user created during installation of Kaspersky MLAD. A user with the system administrator role has access to all functions of the application. The system administrator role cannot be modified or removed.
• A custom role is created manually in the Roles section. Access to application functions depends on the list of rights granted to the custom role. The number of user roles is unlimited.

The Roles section displays a table with information about all created roles.

Creating role

Role management is available to system administrators.

You can create custom roles and select the access rights to application functions for them. After an active role is created, it will become available for assignment to application users.

To create a role:

1. In the lower-left corner of the window, click .

   You will be taken to the administrator menu.

2. Select the Roles section.
3. Click the Create button.

   The Creating role pane appears on the right.

4. In the Role name field, specify the required role name.

   You can enter up to 30 characters.

5. If necessary, enter a new description for the tag in the Role description field.
6. To grant access rights to a role, do the following:
   1. Click the Select rights button.

      The Grant rights to role pane appears on the right.

   2. In the list of rights, select the access rights to application functions that you want to grant to the role.

      When you select Rights to all actions, all system administrator functions will be available to the role.

   3. Click the Save button.
7. Perform one of the following actions:
   • If you need to use a role for application users, set the State switch to the Active position.
   • If you need to disable the use of a role for application users, set the State toggle switch to the Inactive position.

     If a role is inactive, the features associated with the role's permissions are unavailable to the user assigned to that role.

8. Click the Save button.

Editing role

Role management is available to system administrators.

To change a role:

1. In the lower-left corner of the window, click .

   You will be taken to the administrator menu.

2. Select the Roles section.
3. Check the box next to the role you want to edit.
4. Click the Edit button.

   The Editing role pane appears on the right.

5. Edit the role settings. For a description of the settings, see the instructions on creating a role.
6. Click the Save button.

Deleting role

Role management is available to system administrators.

When a user role assigned to Kaspersky MLAD users is deleted, those users will lose access to the features associated with that role.

System administrator role cannot be deleted.

To delete a role:

1. In the lower-left corner of the window, click .

   You will be taken to the administrator menu.

2. Select the Roles section.
3. Select the check boxes next to the names of the roles that you want to remove.
4. Click the Delete button.
5. In the window that opens, confirm that you want to delete the roles.

Viewing access rights for a role

Role management is available to system administrators.

In the Roles section, you can view a list of access rights to application functions for users with a specific role.

To view the access rights for a role:

1. In the lower-left corner of the window, click .

   You will be taken to the administrator menu.

2. Select the Roles section.
3. Click the List of rights button next to the role for which you want to view the list of rights.

   A window opens on the page with information about access rights to application functions for the selected role.