Global Security Administrator

A default Global Security Administrator role is created during installation and the default user, admin, is assigned to this role. When you first log on with the password set during installation, you have full administrative access to all configuration settings in the Security Manager, and also the following permissions in the modules that are part of your subscription:

  • Web Security module: Added to the Super Administrator role with unconditional permissions.
  • Data Security module: Assigned Super Administrator permissions.
  • Email Security module: Assigned Super Administrator permissions.
    Note: In deployments that include Forcepoint appliances, access to the command-line interface (CLI) is controlled with a separate password.

The permissions given to a Global Security Administrator within the individual Security Manager modules cannot be modified.

The admin account does not appear in the list of administrators for the Super Administrator role. It cannot be deleted and its permissions cannot be modified.

You can add additional Global Security Administrators as needed. Creating multiple Global Security Administrators ensures that if the primary Global Security Administrator is not available, another administrator can access all Security Manager policy and configuration settings.