topic Re: AMP for Endpoint Unprivileged User in Endpoint Security

AMP for Endpoint Unprivileged User

enversingh — Fri, 21 Feb 2020 05:09:17 GMT

Hi, In AMP for Endpoints I've created an account without Administrative privileges and only granted access to a few groups, no policies or any other lists. Allow user to fetch file and command line data is unchecked.

When i log into the console with the user account, I'm able to see the groups however I'm able to then delete devices within those groups and move devices to other groups.

My aim is to create a read/view only account.

Any help/thoughts?

Re: AMP for Endpoint Unprivileged User

Troja007 — Fri, 07 Jun 2019 09:17:16 GMT

Hello @enversingh,

AMP console works here as expected. You can take a look into the AMP help directly in the AMP and searching for "Unprivileged Users". The article describes the user management in detail.

We are highly interested into Feedback. So please, get in contact with your Cisco representative to add a Feature Request.

Cheers,

Thorsten

Re: AMP for Endpoint Unprivileged User

enversingh — Sun, 09 Jun 2019 08:38:07 GMT

hi Thorsten

I've attached a screenshot of the settings/permissions of the user I've created. As you will see the only setting chosen is for Groups. I've been through the Help section prior to the post.

Regards

Enver

Re: AMP for Endpoint Unprivileged User

Troja007 — Tue, 11 Jun 2019 07:24:12 GMT

Thanks for the screenshot.

As described in my previous answer, looks like AMP console works as expected. The only thing we can do are.

1) maybe TAC has additional information.

2) Talking to your Cisco Representative to open a Feature Request.

Greetings,

Thorsten

Re: AMP for Endpoint Unprivileged User

EnverSingh7603 — Tue, 11 Jun 2019 19:39:59 GMT

Thanks I've opened a case with the TAC.

Re: AMP for Endpoint Unprivileged User

Troja007 — Wed, 12 Jun 2019 05:44:24 GMT

Hello @EnverSingh7603,

would be great to know what TAC answered for this.

Greetings,

Thorsten