Questions
There are multiple admin roles in HENNGE Access Control. Please tell me what each role can do.
Answer
There are 5 types of admin roles, each with specific permissions and restrictions, as outlined in the table below.
※ All admins have access to the management screen and can download log files.
However, certain actions are restricted despite their assigned roles.
Refer to the details below for more information.
| No. | Role Name | Action details |
| 1. | Global Admin | Has edit rights for all menus. |
| 2. | Device Certificate and Secure Browser Admin | Combines the permissions of roles 3 and 4. |
| 3. | Device Certificate Admin | Can issue, revoke, and edit device certificates. |
| 4. | Secure Browser Admin | Can approve, reject, and edit Secure Browsers. |
| 5. | Read-Only Admin | Has no edit rights for any menus. |
Examples of operations with restricted roles
| Operation | 1 | 2 | 3 | 4 | 5 | Notes |
| Edit [Domain Settings] - [Secure Browser Related] | ✓ | - | - | - | - |
Since it affects the operation of all users, only global administrators can edit it. |
| Edit [Domain Settings] - [Device Certificate Related] | ✓ | - | - | - | - |
Since it affects all users who issue certificates, only global administrators can edit it. |
| View Client Secret Metadata in [Connected Services] | ✓ | - | - | - | - | Due to the confidential nature of the information, only global administrators can access it. |
| Add / Delete / Edit Browser Policy Groups in [Secure Browsers] | ✓ | - | - | - | - | Since it may affect the operation of all users, only global administrators can edit it. |
| Download Device Certificates from [Device Certificate List] | ✓ | ✓ | ✓ | - | - |
Due to the high confidentiality of information related to device certificates, it is restricted to administrators with editing permissions for device certificates. |
| [Device Cert Operations] Download Device Certificate | ✓ | ✓ | ✓ | - | - | Information related to device certificates is highly confidential, so it is restricted to administrators with editing permissions for device certificates. |