Delegated Administration Quick Start

Delegated Administration Quick Start

Topic 50200 / Updated: 21-Apr-2011

Applies To:

Websense Web Filter, Web Security, Web Security Gateway, and Web Security Gateway Anywhere Version 7.6

Delegated administration is a powerful tool for distributing filtering configuration, policy management, and reporting responsibilities across an organization.

Global Security Administrators can define administrator accounts for all TRITON console modules (Web Security, Data Security, and Email Security).

In the Web Security module, Super Administrators can then grant policy management privileges, reporting rights, or both to delegated administrators, who can manage or report on Internet usage for specific clients (users, groups, computers, or networks).

Super Administrators can also:

Create a set of master filtering restrictions that limit the filtering access that delegated administrators can provide.

Send copies of policies and filters that they have created to delegated administrators, who can use these policies as templates for creating policies and filters to apply to their clients.

All of this is accomplished through the use of roles, which group related clients with the administrators responsible for managing their Internet filtering policies, reporting on their Internet usage, or both. For example, a school district might create Staff, Teachers, and Elementary Students roles, and then assign one or more administrators to each.

To start using delegated administration, first use TRITON - Web Security to prepare your Websense Web Security environment:

1.	(Optional) Configure user directory service settings: Make sure that Websense software can communicate with your directory service so that you can add user, group, and domain (OU) clients in TRITON - Web Security.

2.	Customize Super Administrator policies and filters: Establish a filtering baseline for your organization.

3.	Edit the Filter Lock: Create basic category and protocol filtering restrictions that will apply to all delegated administrators.

When the environment is ready, set up administrator accounts via TRITON Settings:

4.	(Optional) Configure directory service settings for administrators: Make sure that the TRITON Unified Security Center can communicate with the directory service used to authenticate administrator logons.

5.	Configure email settings for administrators: Enable administrator notifications and automated password reset functionality.

6.	Create administrator accounts: Grant administrators TRITON - Web Security access.

Next, use TRITON - Web Security to enable delegated administration of policy management and reporting tasks.

7.	Create delegated administration roles in TRITON - Web Security: Define which administrators will manage policies, run reports, or both for which groups of clients.

8.	Train delegated administrators: Make sure that new administrators know how to perform their tasks.

This Quick Start guide provides the basic information needed to get started with delegated administration. Complete and comprehensive instructions are available from the TRITON - Web Security Help, available in HTML or PDF format from the Help menu in TRITON - Web Security, or from the Websense Technical Library.

Delegated Administration Quick Start