G DATA Managed XDR

Creating and Editing Roles

The window has the same layout whether you are creating a new role or editing an existing role. Roles and their permissions can be created and edited for both core functions and individual products.

When creating a role, you can assign a name of up to 16 characters.

Select or clear the checkboxes to set permissions. You can select permissions directly for parent categories to grant them for the associated areas. If all permissions for a parent category are granted, its checkbox displays a check mark.

If only some permissions in a parent category are selected, the checkbox displays a horizontal line. Partial selection

If the checkbox Empty checkbox is not selected, the corresponding permission is not granted.

If a permission’s checkbox appears dimmed, that permission can only be granted after its prerequisite permission has been granted. For example, the Delete Users permission cannot be granted unless the role has the View Users permission.

Grant permission to assign roles only to roles with full permissions across all products. Otherwise, a user with such a role and limited permissions could grant themselves all additional permissions without authorization. For example, if a role is allowed to manage the portal but cannot view Endpoints or mark Recommended Actions as complete, that role should not have permission to assign itself the missing permissions.

Core Functions

Core functions support general operation of the web portal and provide capabilities for User Management, User Roles, and Organization. The available permissions are listed below by category.

User Management

View Users

Allows viewing users.

Create Users

Allows creating new users.

Edit Users

Allows editing existing users.

Delete Users

Allows deleting existing users.

Assign a Role

Allows assigning a role to a user.

Two-Factor Authentication

Permission to enable or disable two-factor authentication for a user.

User Roles

View Roles

Allows viewing roles.

Create Roles

Allows creating new roles.

Edit Roles

Allows editing existing roles.

Delete Roles

Allows deleting existing roles.

Organization

View Organization Units

Permission to view Organization Units.

Create Organization Units

Allows viewing Organization Units.

Edit Organization Units

Allows editing existing Organization Units.

Delete Organization Units

Allows deleting existing Organization Units.

Enable Device Control

Allows enabling Device Control.

Enable Endpoint Notifications

Allows assigning Endpoint notifications.

Product-Specific Settings

Depending on the product, additional product sections may be available.

Permission Configuration G DATA Managed XDR

Specify which configuration permissions the role receives for G DATA Managed XDR.

Endpoint Management

View and Edit

Specifies whether users with this role can view and/or edit Endpoints.

Agent Settings

Removing an Endpoint from the portal requires permission to uninstall Agents from Endpoints. When starting the Agent uninstallation, you can choose whether to remove the Endpoint record from the portal at the same time. Users authorized to uninstall Agents can also remove the Endpoint record from the G DATA Web Portal later.

Uninstalling the Agent prevents monitoring of the selected Endpoint. Malware will no longer be blocked automatically, and our G DATA Security Analysts will no longer be able to provide incident-response services on the Endpoint.

Pause Agent

Specify whether users with this role can pause the Agent on Endpoints for 15 minutes.

Please note that scans continue to run. Detections are logged during this time, but ongoing work on the Endpoint is not interrupted. This function must not be used to improve performance.

Enable Tray Icon

Specify whether users with this role can display the Agent icon in the Windows notification area on Endpoints.

Incidents & Recommended Actions

View Incidents & Recommended Actions

Specify whether users with this role can view Incidents and Recommended Actions.

Mark Recommended Actions as Complete

Specify whether users with this role can mark Recommended Actions as complete. This option is available only if the role has permission to view Recommended Actions.

View Logs

Specify whether users with this role can access the Logs view.

Notifications

View Notifications

Switch that controls whether users with this role receive notifications.

Edit & Delete Emergency Contacts

Specify whether users with this role can add users to and remove users from the emergency contact list.

This permission necessarily includes permission to view all users!

Edit & Delete Email Notifications

Specify whether users with this role can add users to and remove users from the email notification recipient list. You can also set the email language and the types of notification events.

This permission necessarily includes permission to view all users!

Permission Configuration: Device Configuration

If you use G DATA Policy Control, you can specify here which changes users with this role can make in the product.

Device Activity Logging

Specifies whether users with this role can view device activity logs.

View Exclusions

Allows viewing Exclusions.

Edit and Delete Exclusions

Allows editing and deleting Exclusions.

Global Access Rules

Specifies whether users with this role can view and/or edit global access rules and edit the notifications displayed on Endpoints.

Permission Configuration G DATA Mail Protection

If you use G DATA Mail Protection, you can specify here whether the product is displayed in the G DATA Web Portal for users with this role.

Permission Configuration G DATA Mobile Device Management

If you use G DATA Mobile Device Management, you can specify here whether the product is displayed in the G DATA Web Portal for users with this role.