Access rights for administrators

07/12/2023 237 People found this article helpful 489,255 Views

Description

What are the access rights available for the different administrator and which zone(s) can they login from?

Resolution

Resolution for SonicOS 7.X

This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.

SonicWall appliance provides a default build-in administrator account (Username: admin; Password: password ). When logging in the firewall with this default account and navigate to Device | Users | Local Users & Groups page, you can see another four administrators groups (SonicWall Administrators, Limited Administrators, SonicWall Read-Only Admins and Guest Administrators).

These five administrators can be classified into four configuration modes (Full Admin, Read-only Admin, Limited Admin, Guest Admin).

Build-in Administrator : Full admin
SonicWall Administrator: Full admin
Limited Administrator: Limited Admin
SonicWall Read-Only Admin: Read-Only Admin
Guest Administrators: Guest Admin (Guest management only)

Which zone(s) can these administrators access from?

Zone	Full admin	Limited Admin	Read-Only Admin	Guest Admin
WAN	X		X	X
LAN	X	X	X	X
DMZ	X	X	X	X
WLAN	X	X	X	X
VPN	X	X	X	X
SSLVPN	X	X	X	X

What are the access rights available for the different administrator?

Function	Full Admin in config mode	Full Admin in non-config mode	Read-only Admin	Limited Admin	Guest Admin
Import certificates	X
Generate certificate sign- ing requests	X
Export certificates	X
Export appliance settings	X	X	X
Download TSR	X	X	X
Use other diagnostics	X	X		X
Configure network	X			X
Flush ARP cache	X	X		X
Setup DHCP Server	X
Renegotiate VPN tunnels	X	X
Log users off	X	X		X guest users only	X guest users only
Unlock locked-out users	X	X
Clear log	X	X		X
Filter logs	X	X	X	X
Export log	X	X	X	X
Email log	X	X		X
Configure log categories	X	X		X
Configure log settings	X			X
Generate log reports	X	X		X
Browse the full UI	X	X	X
Generate log reports	X	X		X
Using CLI	X	X

NOTE: This table does not include all functions available to limited administrators,Guest admin can only browse and manage guest related functions.

TIP: Non-configuration mode can be entered when another administrator is already in configuration mode and the new administrator chooses not to preempt the existing administrator.

Priority for preempting administrators?

The build-in admin and SonicWall global management system (GMS) both have the highest priority and can preempt any users.
A user that is a member of the SonicWall administrators (Full admin) can preempt any users except for the build-in admin and SonicWall GMS.
A user that is a member of the Limited Administrators can only preempt other members of the Limited Administrators group

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

SonicWall appliance provides a default build-in administrator account (Username: admin; Password: password ). When logging in the firewall with this default account and navigate to Manage | Users | Local Users & Groups page, you can see another four administrators groups (SonicWall Administrators, Limited Administrators, SonicWall Read-Only Admins and Guest Administrators).

These five administrators can be classified into four configuration modes (Full Admin, Read-only Admin, Limited Admin, Guest Admin).

Build-in Administrator : Full admin
SonicWall Administrator: Full admin
Limited Administrator: Limited Admin
SonicWall Read-Only Admin: Read-Only Admin
Guest Administrators: Guest Admin (Guest management only)

Which zone(s) can these administrators access from?

Zone	Full admin	Limited Admin	Read-Only Admin	Guest Admin
WAN	X		X	X
LAN	X	X	X	X
DMZ	X	X	X	X
WLAN	X	X	X	X
VPN	X	X	X	X
SSLVPN	X	X	X	X

What are the access rights available for the different administrator?

Function	Full Admin in config mode	Full Admin in non-config mode	Read-only Admin	Limited Admin	Guest Admin
Import certificates	X
Generate certificate sign- ing requests	X
Export certificates	X
Export appliance settings	X	X	X
Download TSR	X	X	X
Use other diagnostics	X	X		X
Configure network	X			X
Flush ARP cache	X	X		X
Setup DHCP Server	X
Renegotiate VPN tunnels	X	X
Log users off	X	X		X guest users only	X guest users only
Unlock locked-out users	X	X
Clear log	X	X		X
Filter logs	X	X	X	X
Export log	X	X	X	X
Email log	X	X		X
Configure log categories	X	X		X
Configure log settings	X			X
Generate log reports	X	X		X
Browse the full UI	X	X	X
Generate log reports	X	X		X
Using CLI	X	X

NOTE: This table does not include all functions available to limited administrators,Guest admin can only browse and manage guest related functions.

TIP: Non-configuration mode can be entered when another administrator is already in configuration mode and the new administrator chooses not to preempt the existing administrator.

Priority for preempting administrators?

The build-in admin and SonicWall global management system (GMS) both have the highest priority and can preempt any users.
A user that is a member of the SonicWall administrators (Full admin) can preempt any users except for the build-in admin and SonicWall GMS.
A user that is a member of the Limited Administrators can only preempt other members of the Limited Administrators group

Not Finding Your Answers?

ASK THE COMMUNITY

Was This Article Helpful?

YES NO

Access rights for administrators

Description

Resolution

Resolution for SonicOS 7.X

Resolution for SonicOS 6.5

Related Articles

Categories

Not Finding Your Answers?

Was This Article Helpful?

Article Helpful Form

Article Not Helpful Form

Follow Us

Subscribe to newsletter

Stay In Touch