Your IP:

Knowledge Base

Search the Knowledge Base

Knowledge Base > Configuring & Using OpenDNS > Additional Account Attributes in OpenDNS Enterprise

Assigning Delegated Administration Permissions to Users

Delegating administration of a network to a user enables that user to access details of the network based on the user's permissions. OpenDNS Enterprise networks can have multiple users with varying permissions ranging from Read-Only to Read/Write/Grant, as defined in the following table.

User Permission Description
Read-Only Allows the user to view the usage reports of the network for which they have been assigned access.
Read/Write Allows the user to view the usage reports and change OpenDNS administrative settings on the network for which they have been assigned access.

Users with the Read/Write privilege cannot set or manage Block Page Bypass rules.
Read/Write/Grant Allows the user to view the usage reports and change OpenDNS administrative settings on the network for which they have been assigned access.

Within their networks, this user can manage administrative permissions of other users. This user cannot add or remove other users.

Users with the Read/Write/Grant privilege can set and manage Block Page Bypass rules.
Super User Allows the user to manage other users and grant or revoke permissions of a user for all networks listed within an organization.

A Super User cannot remove the organization's primary administrator; the user account under which the organization was first created.

To grant the Super User privilege, see Managing Users in an Enterprise Organization.

To Assign Administrative Privileges for a User

To delegate administration for networks in an organization, log in to the Dashboard and go to the Settings tab. In the Settings for: box, select the Organization Name. The Plan Info page appears by default. From the options on the left, select Delegated Administration.

One or more networks should appear in the Allow Access To: box. These are the networks for which you can delegate administration. If you are a Super User, you can delegate administration for all networks in the organization. From the User: box, select the username and assign their appropriate Permission. Select the network(s) for which you want this user to have rights and click Grant Access.

To Revoke Administrative Privileges for a User

To revoke administrative permissions for a user, log in to the Dashboard, Settings tab and Delegated Administration page. Go to the user account and select the networks to revoke permissions, scroll to the bottom and click Revoke Access.