Configuring Roles in Gaia Portal

You define roles on the User Management > Roles page of the Gaia PortalClosed Web interface for the Check Point Gaia operating system..

This page also shows a list of existing roles.

Important - On Scalable Platforms (Maestro and Chassis), you must connect to the GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Portal of the applicable Security Group.

Step

Instructions

1

In the navigation tree, click User Management > Roles.

2

Click Add.

3

In the Role Name field, enter the applicable name.

The role name must start with a letter and can be a combination of letters, numbers and the underscore (_) character.

4

On the Features tab:

In the R/W column, click the ? icon near the feature you wish to configure in this role and select the permission: None, Read Only, or Read / Write.

Important - A user with Read/Write permission to the User Management feature can change a user password, including that of the admin user. Be careful when assigning roles that include this permission!

See List of Available Features in Roles.

5

On the Extended Commands tab:

Select the commands you wish to configure in this role.

  • To select several commands:

    1. Press and hold the CTRL key on the keyboard.

    2. Left-click the applicable commands (in the Name, Description, or Path column).

      The selected commands become highlighted.

    3. In the top right corner, select the option Check selected as.

      The checkboxes of the selected commands become checked.

  • To clear several selected commands:

    1. Press and hold the CTRL key on the keyboard.

    2. Left-click the applicable commands (in the Name, Description, or Path column).

      The selected commands become highlighted.

    3. In the top right corner, clear the option Check selected as.

      The checkboxes of the selected commands become cleared.

See List of Available Extended Commands in Roles.

6

Click OK.

Step

Instructions

1

In the navigation tree, click User Management > Roles.

2

Select the role.

3

Click Edit.

4

On the Features tab:

In the R/W column, click the ? icon near the feature you wish to configure in this role and select the permission: None, Read Only, or Read / Write.

Important - A user with Read/Write permission to the User Management feature can change a user password, including that of the admin user. Be careful when assigning roles that include this permission!

5

On the Extended Commands tab:

Select the commands you wish to configure in this role.

  • To select several commands:

    1. Press and hold the CTRL key on the keyboard.

    2. Left-click the applicable commands (in the Name, Description, or Path column).

      The selected commands become highlighted.

    3. In the top right corner, select the option Check selected as.

      The checkboxes of the selected commands become checked.

  • To clear several selected commands:

    1. Press and hold the CTRL key on the keyboard.

    2. Left-click the applicable commands (in the Name, Description, or Path column).

      The selected commands become highlighted.

    3. In the top right corner, clear the option Check selected as.

      The checkboxes of the selected commands become cleared.

6

Click OK.

Step

Instructions

1

In the navigation tree, click User Management > Roles.

2

Select the role.

3

Click Delete.

4

Click OK to confirm.

Note - You cannot delete the default roles adminRole and monitorRole.

Step

Instructions

1

In the navigation tree, click User Management > Roles.

2

Select the role.

3

Click Assign Members.

4

In the Available Users list, left-click the user you wish to add to the role.

To select several users:

  1. Press and hold the CTRL key on the keyboard.

  2. Left-click the applicable commands. The selected users become highlighted.

5

Click Add >.

The selected users move to the Users with Role list.

6

Click OK.

Step

Instructions

1

In the navigation tree, click User Management > Roles.

2

Select the role.

3

Click Assign Members.

4

In the Users with Role list, left-click the user you wish to remove from the role.

To select several users:

  1. Press and hold the CTRL key on the keyboard.

  2. Left-click the applicable commands. The selected users become highlighted.

5

Click Remove >.

The selected users move to the Available Users list.

6

Click OK.

Note - You can assign a user to many roles on the Users page (see Users).