How to create a privilege profile on EPM Windows

This document provides information on how to create a privilege profile on EPM Windows.

More information in About privilege profiles.

To use a privilege profile, you must enable it in the EPM parameters screen through the Enable Privilege Profile? * parameter.

Create a privilege profile

To create a privilege profile, see the following steps:

1. On Segura® Platform, in the navigation bar, hover over the Products menu and select EPM.
2. In the side menu, select Policies > Windows and click Privilege Profile.
3. In the Privilege Profile report, click + Add.
4. In the General tab, enter the following information:
   1. In the Name * field, enter a name for the profile.
   2. In the Status * field, select the status for the profile.
   3. Optional: In the Description field, enter a description for the profile.
   4. In the Specify targets to apply * field, select to target specific devices, users, or organizational units. If you select this field, the Targets tab will be displayed.
5. Click Continue.
6. In the Access policies tab, click + Add to select the policies to be applied in this privilege profile.
   1. Select the desired policies and click Add.
7. In the Automations tab, click + Add to select the automations to be applied in this privilege profile.
   1. Select the desired automations and click Add.
8. In the Directory and File Control tab, click + Add to select the policies related to directory and file control to be applied in this privilege profile.
   1. Select the desired policies and click Add.
9. In the Directory and File Scan tab, click + Add to select the policies related to directory and file scan to be applied in this privilege profile.
   1. Select the desired policies, and click Add.
10. In the System Registry Control tab, click + Add to select the policies related to system registry control to be applied in this privilege profile.
    1. Select the desired policies and click Add.
11. In the Commands tab, click + Add to select the commands to be applied in this privilege profile.
    1. Select the desired commands and click Add.
12. In the Segregated Parameters tab, click + Add to select the segregated parameters to be applied in this privilege profile.
    1. Select the desired parameters and click Add.
13. Optional: In the Targets tab, click + Add to select the targets to be applied in this privilege profile.
    1. Select the desired users, devices, or organizational units and click Add.
14. In the Review tab, review all information entered previously and click Save.

After creating a privilege profile, it will be displayed in the Privilege profile report.