How did you setup Permissions

[mtravis]

I am trying to decide on how to setup permissions for my company. The two options in my head are permissions based on the team (Server team, desktop support, Security, etc...) and permissions based on tool and tool rights.

For Permissions based on Teams I see myself having the following:

• Security Reviewer
• Security Operations
• Desktop Support
• Server Support
• Endpoint Engineering

For Tools/Tool rights I see there being more sets but easier to give specific permissions to a group/person:

• Encryption Admin
• Encryption Recovery
• DLP Reviewer
• DLP Admin
• DLP Bypass
• ENS Admin
• ENS Reviewer

etc....

How are you managing your permissions? Would you change it? Which method would you choose or a different method not mentioned?

[User91972758]

Permission sets in our environment are done similar to how you listed.

• Service Desk
• Engineering
• CSIRT
• Administrators
• Server Admins
• etc.

Then we use ADGroups to provision access to the above ePO groups, makes it a lot easier to manage.

[vnaidu]

@mtravis 

Dear Travis,

I would recommend you to use the AD Groups for the ePO groups which would be easy for management. In addition, you may refer the document.

https://docs.mcafee.com/bundle/epolicy-orchestrator-5.9.0-product-guide/page/GUID-17CC4F49-DDAA-4282...

Cheers!!!