KRMC Hosted - Admin Management Page - Admins - Edit Admin Permissions

Edit Admin Permissions allows you to change the permissions for any account on KRMC.  KRMC provides the ability to alter most settings within the console providing you the ability to make accounts function the way you want.  Note: If you are looking to use the feature “Set Permissions and Display Settings From Profile”, you must set the permissions in this section as well as Edit Admin Display for at least one Regular Administrator (RA) before use.

Account Access

Account Enabled	The Account is enabled and able to be accessed.  Note: The option will change automatically if "Account Disabled" is selected.
Account Disabled	The Account is disabled and unable to be accessed.  Note: The option will change automatically if "Account Enabled" is selected.

Account Permissions

Can See Only Drives Assigned to Administrator Groups	The administrator account is only able to see drives that has been assigned to a group the account is added to.  This will provide a limited access to drives.  Note: The option will change automatically if "Can See Drives Assigned to Administrator and Super Administrator Groups" is selected.
Can See Drives Assigned to Administrator and Super Administrator Groups	The administrator account  is only able to see drives that has been assigned to a group the account is added to.  This will provide a limited access to drives.  Note: The option will change automatically if "Can See Only Drives Assigned to Administrator Groups" is selected.
Can Edit Device Information	The administrator account can edit device information for drives that the administrator is able to manage.
Can Send Actions to Drives	The administrator account can send actions to drives that the administrator is able to manage.  You can use the drop-down to select and unselect actions that the admin is able to perform. Note: You are not able to unselect action types if the permission "Can Create Any Action For Drives" is selected.
Can Create Any Actions For Drives	The administrator account can send any action to drives that the administrator is able to manage.  If you are looking to limit the types of actions that your admin can send, you must first unselect this option before you can change the actions available to this account in the permission "Can Send Actions to Drives".
Can View SSPM Codes	The administrator account can view the most recent SSPM code sent for a drive that the administrator is able to manage.
Can Send Emails	The administrator account can send emails to the users of the drives that the administrator is able to manage.
Can Export Device List	The administrator account can export the device list.  Note: This will only contain the information for drives that the administrator is able to manage.

Advanced Account Abilities

Give Super Administrator Permissions	This setting when enabled, provides the ability to use any/all of the options below.  In previous version of KRMC, this was called the Global Device Administrator.  It is highly recommended that you only provide access to those accounts that need them as this can limit the SA's ability to control the account.
Can See All Drives	The administrator account can see all drives on the KRMC account without limitations of what groups drives are in.
Can Send Actions to All Drives	The administrator account can send any action to all drives on the KRMC account without limitations of what groups drives are in.
Can Create Any Global Action for Drives	The administrator account can send any action to all drives on the KRMC account as a Global Action without limitations of what groups drives are in.
Can Park Drives	The administrator account can park eligible drives on the KRMC account.
Can Activate Park Drives	The administrator account can activate parked drives on the KRMC account.  Note: A valid KRMC license is required for a drive to be moved to Active from Parked.
Can Delete Drives from KRMC	The administrator account can delete any drive from KRMC account.
Can Create and Edit Administrators	The administrator account  is able to create and edit other administrator accounts (not including the SA account).
Can Create and Edit Auditors	The administrator account is able to create and edit auditor accounts.
Can Create and Edit Groups	The administrator account is able to create and edit groups.  This includes which drives are assigned to a group and provisioning settings.
Can Edit SAML Settings	The administrator account edit the SAML settings on the KRMC account.
Can Edit SSPM Email Domain Allowlist	The administrator account can edit the SSPM and Contact Allowlist settings on the KRMC account.
Can Edit Event Export	The administrator account edit the Event Export (SIEM) settings on the KRMC account.
Can Edit AD Service Integration Sync	The administrator account edit the AD Integration Device Disable setting on the KRMC account.
Can Edit Email Templates	The administrator account is able to edit the templates used for the email services.
Can Manage File Audit Notifications	The administrator account edit the File Audit View settings on the KRMC account.

For more information on KRMC Hosted, please refer to the User Manual located at HERE.