Technical Note. System Roles in ZL Unified Archive

Transcription

1 Technical Note System Roles in ZL Unified Archive Version March 2015

2 Copyright 2015 ZL Technologies, Inc. All rights reserved ZL Technologies, Inc. ( ZLTI, formerly known as ZipLip ) and its licensors retain all ownership rights to the software programs offered by ZLTI (referred to herein as Software ) and related documentation, (together, the Products ). Use of the Software and related documentation is governed by the license agreement accompanying the Software and applicable copyright law. Your right to copy the Products is limited by copyright law and the license agreement. Making unauthorized copies, adaptations, or compilation works is prohibited. ZLTI may revise this documentation occasionally without notice. THIS DOCUMENTATION IS PROVIDED AS IS WITHOUT WARRANTY OF ANY KIND. IN NO EVENT SHALL ZLTI BE LIABLE FOR INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY KIND ARISING FROM ANY ERROR IN THIS DOCUMENTATION, INCLUDING WITHOUT LIMITATION ANY LOSS OR INTERRUPTION OF BUSINESS, REVENUE, USE, OR DATA. Other product and company names appearing in ZLTI products and materials are used for identification purposes only and may be trademarks or registered trademarks of their respective companies. Third party trademarks used in any ZLTI products and materials are the exclusive property of their respective owners. Part Number TNROLQR70-00

3 Roles in ZL UA This technical note contains brief notes and quick reference tables for the various user roles available in the ZL UNIFIED ARCHIVE system. Understanding Roles and Privileges ZL UA allows for privileges and roles to be assigned to users based on their roles in the organization. Access privileges in the application differ for Department Reviewers, Compliance s, Compliance Auditors, and Reviewer s. It is important to understand the difference between a role and a privilege as these terms are used in various places throughout the manual. Role A role is the function of an individual, independent of any conditions. A ZL UA user can be assigned any number of system roles. Examples of roles include Compliance, Auditor, and Reviewer. Privilege A privilege is an additional resource granted to users in addition to their standard system roles that allows them to perform certain additional operations in the Web application. An example of a privilege that can be granted to users is the compliance Reviewer privilege. Using System Roles You can view the ZL UA system roles in the ZL SysAdmin application. Click Roles System/Roles in the left-hand navigation pane. The System Roles tab appears listing all the roles that have been created in the system: Figure 1: Systems Roles Screen 3

4 The following tables (1-5) summarize the attributes of each of these various system roles: TABLE 1, Core Roles Role Name Grantable Roles Allowed Operations Super All All System All in SysAdmin interface Domain (Global) Domain System Web Services Manage users of all, configure group lists, customize user interface Tenant All* All operations in Records Management interface. System No Actions View all in SysAdmin interface *Cannot grant Super and System roles. TABLE 2, ZL File Archiving & Storage Roles Role Name Grantable Roles Allowed Operations Storage Storage Auditor Everything in storage application Storage Search Storage Storage User Storage Search Storage User Storage Auditor Storage user management Storage Search Storage Storage User Storage Search Storage Auditor Read Privilege View audit trails Storage Search Read Privilege View audit trails File Search export Storage Search Read privilege TABLE 3, ZL Compliance Manager Roles Role Name Grantable Roles Allowed Operations 4

5 Compliance Compliance User Compliance Reviewer (allow actions) Compliance Reviewer (no actions) Compliance Department Compliance Compliance Reviewer (allow actions) Compliance Reviewer (no actions) Compliance Auditor Compliance User Compliance Department Compliance Search Compliance Lexicon Targeted Review Compliance Search Compliance Reviewer (allow actions) Compliance Reviewer (no actions) Compliance Auditor Compliance User Compliance Department Compliance Search Compliance Lexicon Targeted Review Compliance Search All in Compliance interface View department members Find Users menu item Create/List/Update users View Compliance audit reports Read-only privilege on selected departments View messages caught for compliance View/Review/Act on messages caught for compliance View/Review/Act on messages caught for compliance at a bulk level View Compliance audit reports List department members Find Users menu Item Search for internal mails View messages caught for compliance View Compliance audit reports List department members Find Users menu item Search for internal mails Read-only privilege on selected departments View Compliance audit trails List department members Find Users menu item 5

6 Compliance Search View Compliance audit reports Compliance search export Search using raw query text Search for internal mails Compliance Lexicon Create/edit/view lexicons View Compliance audit Reports Compliance Search View Compliance audit reports Search for internal mails Compliance Auditor View Compliance audit trails Targeted Review View Compliance audit reports Search for internal mails Compliance Report View Compliance reports Compliance Search External Only View Compliance audit reports Archive Search Export Archive Search TABLE 4, ZL Discovery Manager Roles Role Name Grantable Roles Allowed Operations Case User Case Task Approver Case Index Admin Case Auditor Case Reviewer Case User Case Manager Archive Search (zdiscovery) Case Task Auditor (No Actions) Investigation Request Initiator View Users/Mailing lists Subscribe to a case View Case Information 6

7 Case Reviewer Subscribe to a case View Case Information View Custodians Create Tags Search Case Case Folder manipulation Case-level review actions Item-level review actions Case-level advanced review actions* Item-level advanced review actions* Data analytics* Assign to bucket* Exclusion actions* *Advanced Review & Analytics only Case Auditor Subscribe to a case View Case Information View audit trails View reports View case item metadata Case Task Auditor (no actions) View Task Inbox View Task Audits Case Task Approver View/approve Case Tasks Investigation Request Initiator Case Manager Case Auditor Case Reviewer Case User Case Manager Initiate Investigation Requests Everything in Discovery interface except for: - Search the archive - Add data to a case - Case Index actions - View/approve Case Tasks Case Search Admin Case Index actions Archive Search (zdiscovery) Search the archive Add data to a case TABLE 5, Archiving Roles Role Name Grantable Roles Allowed Operations Unified Archival All* All functionalities in the ZL Unified Archival Admin interface, except for the capability to modify archiving policies Unified Archival Policy Edit and set archiving policies Edit stub templates View set policies *Cannot grant Super, System, or Unified Archival roles. 7

8 Creating Custom Roles ZL UA allows you to define custom roles by modifying or combining system roles. Follow these steps to create a custom role 1. Log into ZL UA as a user with Super Admin privileges. Creating custom roles requires this privilege. 2. Select ZL SysAdmin from the application control menu. 3. Select Roles Custom Roles in the left-hand navigation pane. 4. ZL UA displays a listing of your currently defined custom roles. Click the New Custom Role button to open the Custom Role Wizard: Figure 1.2: Custom Role Wizard Create New Custom Role Page 5. In the Custom Role Wizard, complete the following information: Properties Name Enter a name for the role. Description Enter a description of the role you are creating (optional). Application For custom roles, assigning an application is primarily an organizational feature. The application you choose in this pull-down menu determines the application role group in which the custom role will be included. Roles Select role(s) to grant Select one or more system roles to be assigned to this custom role. Hold down the Control key to select more than one 8

9 role. Audit Trail Record Level This level defines the value that will be recorded when a user with this role performs an action. Keep the value as 'Use default', if you want it to be set as the maximum record level of the comprising roles. See Table 6 on page 12 for a description of default audit trail levels for system roles. Audit Trail View Clearance Level This level defines the minimum value that the role should have to view actions recorded by other roles. Keep the value as 'Use default', if you want it to be set as the maximum clearance level of the comprising roles. See Table 6 on page 12 for a description of default audit trail levels for system roles. 6. Click Next to continue to the next panel. Figure 1.3: Custom Role Wizard Grantable Roles Page 7. In this screen you can choose which roles the custom role is able to grant to other users. You can select multiple roles by holding down the Control key. Note: ZL UA allows you to create a custom role that can grant a privilege to another user that the custom role itself does not have. For example, you could create a role with a basic privilege, such as Archive Search, that could still grant Super privileges to other users. This is not a design error. Certain organizational models that deploy ZL UA require roles where non-privileged users manage the accounts of privileged users. The Allow granting current role option allows roles granted to a user to be granted to further users. That is, enabling this feature allows pass along of the granted roles. 8. Click Next to go to the next screen. A confirmation and notification screen appears. The new custom role appears on the Custom Roles screen. 9

10 Figure 1.4: Custom Roles Tab Audit Trail Levels TABLE 6, Role Default Audit trail Levels Role Name Default Minimum Audit Default Audit Record Level Clearance Level for Viewing Superadmin Top Secret Top Secret Sysadmin Secret Secret Partner Medium Medium Web Services Medium Medium Domain High High Tenant Secret Secret Storage Secret Secret Storage User High High Storage Search High High Storage Search High High Storage Auditor Secret Secret Compliance Top Secret Top Secret Compliance User High High Compliance Reviewer (allow actions) High High Compliance Reviewer (no actions) High High Compliance Department High High Compliance Search High High Compliance Lexicon High High Compliance Search High High Compliance Auditor Secret Secret Unified Archival High High Archive Search High High Archive Search High High 10

11 Case Auditor Secret Secret Case Reviewer High High Case User High High Case Secret Secret Archive Search (zdiscovery) High High Version History Chart Doc Version Applies to Purpose / Changes Author Date Initial doc Gagan Sarawgi 11/14/ Updating doc for 8.0 Lauren Linsky 1/17/ Updating doc for Jeremy Estey 3/2/