cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
ton009
Level 9
Report Inappropriate Content
Message 1 of 13

EPO encryption permission for group users

Jump to solution

I would like to have a group of users (HelpDesk group) to be able to assign users to a laptop for DE.
I tried several modifications to allow the grp to be able to assign a user but cannot find the proper configuration. 

I am able to create group permissions, I just need to know which options should be enabled to allow such action

1 Solution

Accepted Solutions
ton009
Level 9
Report Inappropriate Content
Message 12 of 13

Re: EPO encryption permission for group users

Jump to solution

For the records, this is how i fixed the issue;

LDAP:
Browse LDAP servers

and

System Tree access:
Can search on the following nodes and parts of the System Tree:My Organization
Can access the following nodes and parts of the System Tree:My Organization

View solution in original post

12 Replies
cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 13

Re: EPO encryption permission for group users

Jump to solution

Without knowing what you have tried, we can only suggest a few things.  I would make sure systems and system tree access is appropriate as well as registered servers, allowing access to the ldap servers.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

ton009
Level 9
Report Inappropriate Content
Message 3 of 13

Re: EPO encryption permission for group users

Jump to solution

yes it is active.... but still they have only access to encryption recovery 😞

LDAP:
Browse LDAP servers
cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 13

Re: EPO encryption permission for group users

Jump to solution

Do you see these options under drive encryption for user management?  Do you have this extension checked in?

    User Directory extension HF3 Extension

Permission Sets

 
Edit Permission Set for Executive Reviewer: Drive Encryption
Policy Options
User Management
Recovery Options

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

ton009
Level 9
Report Inappropriate Content
Message 5 of 13

Re: EPO encryption permission for group users

Jump to solution

I can see the drive encryption settings and i checked them all.

seems i do not have the user directory extension.... can i get it via a case please?

cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 13

Re: EPO encryption permission for group users

Jump to solution

You can get it in software manager in epo - it is under drive encryption downloads

 

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

ton009
Level 9
Report Inappropriate Content
Message 7 of 13

Re: EPO encryption permission for group users

Jump to solution
i think you are referring to User Directory extension Version 2.0.2.15 right?

this was installed since it was mandatary for epo upgrade 5.10.0 CU10 😞
Also... we are using ldap connectivity

I'm lost now 😞
cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 8 of 13

Re: EPO encryption permission for group users

Jump to solution

This is what I have checked in:

Untitled.png

Does the audit or orion log show anything about user lacking permissions?

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 9 of 13

Re: EPO encryption permission for group users

Jump to solution

Under registered servers in permission sets, what do you have set for ldap servers?

Permission Sets

 
Edit Permission Set for Executive Reviewer: Registered servers
Seclore Server


Solidcore Syslog Server


Database Server


LDAP Server


McAfee ePO


Azure Server


McAfee GTI Server


Microsoft RM Service


SNMP Server


Syslog Server


Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 10 of 13

Re: EPO encryption permission for group users

Jump to solution

The registered servers one probably isn't relevant, but do you have this option?

User Directory


Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community