[Access Control] Admin Help

Action summary

• Explains how to use each screen in the Access Control Administration according to actual operational scenarios.

Notes

1. The content of this article is based on the product specifications as of April 2025 and may change without notice thereafter.
2. Please refer to the following article for how to access the Administration.
   How to access the Access Control Administration

Table of Contents

System

• Domain Settings
• Connected Service Provider Settings
• Provisioning Settings
• API Client Settings

Users

• Users
• Custom User Attributes

Access Control

• Access Policy Group
• IP Sets

Secure Browser

• Pending Requests
• Devices
• Browser Policy Groups

Device Certificate

• Certificates

Log Management

• Access Logs
• User Operation Logs
• Admin Operation Logs
• Sync Logs
• Batch Registration Logs
• Secure Browser Requests
• Device Certificate Operations

System

Domain Settings

Explains the settings and operations related to the entire system of Access Control.

• Appearance
• Password Related Settings
• Secure Browser Related Settings
• Device Certificate Settings
• Other Settings

Connected Service Provider Settings

Explains the settings for performing single sign-on integration using SAML 2.0 with Access Control as the IDP.

• Add Connected Service
• Edit Connected Service
• Delete Connected Service
• Set Custom User Attributes in SAML Response

Provisioning Settings

Describes how to set up synchronization of user information with Access Control and external services.

If you are synchronizing with Microsoft Entra ID, please refer to the following.

• Access Control User Sync Settings (Access Control → Microsoft 365)
• Stop Regular Synchronization with Access Control Microsoft Entra ID

If you are synchronizing with Google Workspace, please refer to the following.

• Access Control User Provisioning Settings with Google Workspace

If you are synchronizing with other specific cloud services, please refer to the following.

• What is Access Control User Provisioning Function?
• Access Control User Provisioning Settings with Salesforce
• Access Control User Provisioning Settings with Cybozu
• Check/Delete User Provisioning Settings
• Execute User Provisioning and Check Execution Results
• Error Messages Collection for User Provisioning Function

API Client Settings

Describes how to create the necessary API client for synchronizing users from Active Directory to Access Control using the HENNGE Directory Sync Tool.

• Create API Client for HENNGE Directory Sync Tool Execution

If you are integrating user information managed in Access Control with external systems using the Access Control API, please refer to the following.
※ Access Control API is not covered by product support and is not guaranteed to work.

• What is Access Control API?

Users

Users

Describes how to perform settings and operations related to users in Access Control.

• Create / Edit New User
• Batch Register Users
• User Batch Update
• User Batch Delete
• Download User List
• Force Change User Password
• Check User Access Logs
• Search for a User
• Delete User

Custom User Attributes

This section explains how to configure and operate custom user attributes.

• Create / Edit Custom User Attributes
• Delete Custom User Attributes

Access Control

Access Policy Groups

This section explains the configuration and operation of access policy groups for controlling user access in Access Control.

• Create / Edit New Access Policy Group
• Delete Access Policy Group
• Copy Existing Access Policy Group
• Assign Access Policy Group to Users
• How to Write Access Control Expressions

IP Sets

This section explains the configuration and operation of IP sets used in access policy settings.

• Create / Edit IP Sets
• Delete IP Sets

Secure Browser

Pending Requests

This section explains operations related to device authentication in Secure Browser.

• Device Authentication for Secure Browser

Devices

This section explains operations for registering and managing Secure Browser devices.

• Register Secure Browser from Admin
• Manage Secure Browser Devices
• Delete Secure Browser Devices

For registering Secure Browser from users, please refer to the following article.

• Install Secure Browser (Windows PC version)
• Install Secure Browser (macOS version)
• Install Secure Browser (Android)
• Install Secure Browser (iOS)

Browser Policy Group

This section explains the settings and operations of the Secure Browser's Browser Policy Group.

• Create / Edit Browser Policy Group
• Delete a Browser Policy Group
• Assign Browser Policy Group to Users

Device Certificate

Certificates

This section explains the management settings and operations related to Device Certificates.

• Issue a Device Certificate
  Related Articles:
  • Collect Device Information for Device Certificate
  • Install Device Certificate
• Check Details of Issued Device Certificates
• Download Device Certificate List
• Change Login Type
• Revoke Device Certificate Individually
• Revoke Device Certificates in Bulk
• Resend Device Certificate Installation Guide Email
• Renewal Procedure for Device Certificates Near Expiration
  Related Articles:
  • Overview of Device Certificate Renewal Function

Log Management

Access Logs

This section explains how to check the Access Logs of Access Control.

• Check Access Logs for All Users

User Operation Logs

This section explains how to check User Operation Logs in Access Control.

• Check User Operation Logs

Admin Operation Logs

This section explains how to check Admin Operation Logs in Access Control.

• Check Admin Operation Logs

Sync Logs

This section explains how to check Sync Logs in Access Control.

• Check the Sync Logs

Batch Registration Logs

This explains how to check the logs for batch registration of Users in Access Control.

• Check the Batch Registration Logs

Secure Browser Requests

This explains how to check the request history for Secure Browsers.

• Check the Secure Browser Requests

Device Certificate Operations

This explains how to check the status of operations such as issuance and revocation related to Device Certificates.

• Check the Device Certificate Operations