Roles

Overview

MetaDefender Managed File Transfer™ includes several predefined roles, also referred to as "User Types." When MetaDefender Managed File Transfer™ is first accessed, the initial user is created as an Administrator. Any local user created afterward must have their role defined during the creation process.

Roles and Permissions

Administrator

• Has full system access and can perform all configuration tasks

• Can release files, but cannot approve files unless also assigned the Supervisor role

• Can download and preview files uploaded by other users

• Can unblock a file blocked by MetaDefender Core™ and restore blocked status

Restricted Administrator

• Has access to the Processing History, but cannot preview or download files belonging to other users

• Cannot create or fetch API keys, and cannot import or export MFT settings

• Can unblock a file blocked by MetaDefender Core™ and restore blocked status

Helpdesk Administrator

• Can manage users (add, remove, edit) and perform general administrative tasks

• Has access only to their own files

Auditor

• Has view access to all files processed by the system

• Can access the following sections: Processing History, Outbreak Prevention, Audit, Recycle Bin, and Archive

• Can also view the Supervisor History for files under supervision

Global Supervisor

• A regular user role with elevated permissions

• Can see all files in the pending approval state and approve them, making the files immediately available

• Cannot assign or delegate supervisory roles

Verdict Supervisor

• A Global Supervisor with more accessibility for files

• Has access to the Processing History, and the ability to Override Blocked Status or Restore Blocked Status of user files.

User

• Can manage the files they upload

• Can share files with internal and guest users

• Can create guest users

• For detailed capabilities, refer to the End User Guide

Automation Coordinator:

• Can create and manage Automated Jobs

User Manager:

• A read-only user administration role: can view Local, Active Directory, External and Guest users, and the Groups page, but cannot create, edit, delete, enable or disable any account

• Can view the User Mapping of users, without changing it

• Has access to General Audit, including CSV export, but not to File Audit, and cannot change the audit settings

• Can manage their own files in My Files and access Shared With Me, but has no access to Trash

• Has no access to Processing History, Dashboard, Supervisor Approval, Outbreak Prevention, Trusted Network List, Notifications, Automation or Settings

• Can be assigned by an Administrator, or automatically through an Active Directory group or a Single Sign-On user mapping

[1] Full - But without Revoke/Approve/Delete/Permanently Delete/Archive File

[2] Full - But without Settings

[3] Full - But without Restore/Delete/Permanently Delete

[4] Full - But without API keys

[5] Full - Without the ability to delegate other supervisors

[6] Full - Without the ability to preview of download other user's files

[7] Full - Without settings import/export

[8] Full - Without the ability to Archive/Delete/Permanently Delete

[9] View - All user types and Groups, without the ability to create, edit, delete, enable or disable accounts

[10] General Audit - Without File Audit, and without the ability to change the audit settings