DMARC 2.0 - RBAC Role Permission Change

This article contains information on managing user permissions, roles, and domain groups in DMARC Analyzer 2.0 to control access and streamline administration.

Overview

This article provides you with guidance on managing user permissions and domain groups within DMARC Analyzer 2.0. Use these features to control user access, define access rights, and organize domains into logical groups for streamlined permission management.

Changes to user permissions may take a few minutes to propagate. You should verify changes after saving.

Full Access

Mimecast has expanded Role-Based Access Control (RBAC) in DMARC Analyzer. Full Access, once exclusive to the Super Administrator role, now includes Full Administrator, Basic Administrator, and Partner Administrator roles. Users in these roles have full access to all menus, domain settings, and reports, regardless of other restrictions.

Roles Granted Full Access

• Super Administrator (previously the only role with Full Access).
• Full Administrator.
• Basic Administrator.
• Partner Administrator.

DMARC User Permissions

The DMARC User Permissions screen allows administrators to view and manage all user access rights associated with the account. It provides a centralized table of users and quick access to editing or removing permissions.

All users need access to the Mimecast Administration Console through an Administration Console role. See Roles - Managing Administrator Roles. Customers can limit user roles by creating custom roles. Adding a user to the DMARC User Permission alone does not grant access without an Administration Console administrator role.

To navigate to the DMARC User Permissions screen:

1. Log in to the Mimecast Administration Console | Account | DMARC User Permissions.

Users Table

The table displays the following details for each user:

• Email Address.
• First Name.
• Last Name.
• User Rights - values include Full Access, Limited Access, or No Access.

Actions Menu

Each row in the Users Table includes an Actions menu with the following options:

• Edit Permissions: Opens the Edit User Permissions panel to modify the user's access rights.
• Delete: Permanently removes the user from the account.

Outcome: You can review and manage all user permissions from a single, consolidated view.

Add User

The Add User function enables administrators to grant DMARC Analyzer 2.0 access to existing users in the organization. Users are selected from a dropdown list populated from the organization's user directory.

Dropdown List

A searchable dropdown displays all available users eligible to be added. Select the desired user from the list to proceed.

Save/Cancel

• Save: Confirms the selection and grants the user access to the account.
• Cancel: Discards the selection and returns to the permissions overview without making changes.

Outcome: Simplifies the process of granting account access to existing users without requiring manual entry of user details.

Edit User Permissions

The Edit User Permissions panel allows administrators to customize the level of access granted to a specific user, including full or feature-level permissions and domain group assignments.

Details Section

Displays the following read-only user information for reference:

• Email Address.
• First Name.
• Last Name.

Permission Section

Configure your users access using the following options:

Permission Option	Description
Full Access	Grants the user unrestricted access to all features and domains within the account.
Domain Groups	Assigns the user to one or more specific domain groups, limiting their visibility to those domains.
Aggregate Reports	Allows the user to view DMARC aggregate (RUA) report data.
Alerts & Notifications	Enables the user to configures and receive DMARC-related alerts and notifications.
DNS Delegation	Permits the user to manage DNS delegation settings for monitored domains.
Forensic Reports	Allows the user to access forensic (RUF) failure report data.
Task Manager	Grants access to the Task Manager for monitoring and managing enforcement tasks.

Save/Cancel

• Save: Applies and saves the updated permission configuration for the user.
• Cancel: Discards any changes and returns to the permissions overview.

Outcome: You can tailor user permissions to align precisely with each user's role and responsibilities, ensuring appropriate access control across the account.

See Also...

• DMARC Analyzer 2.0 - Domain Management