Documentation forSecurity Event Manager

Monitor role users and filters

SEM users assigned to the Monitor role can access their assigned filters, but cannot create, edit, delete, or import/export filters.

See About SEM roles for more information.

By default, this role can access the same filter set as other user roles. To remove or modify the filters that Monitor users can access in the console, complete the following steps. Some steps must be competed on the end user computer. When the user logs in to SEM using the same computer and Windows profile, they can access the filters assigned to them by an administrator.

  1. Log in to the SEM Console as an administrator.

  2. In the toolbar, click Configure > Users.
  3. Select the checkbox next to the targeted user and click Edit User.

  4. In the Edit user window, click the Role drop-down menu, temporarily assign the user to the Administrator role, and then click Save.

  5. Instruct the user to log in to the SEM console using their Windows profile.

  6. Change the filters as needed, deleting any unnecessary filters.

    If you created and exported the filters in a previous procedure, you can add new filters to the user Filters list by creating or importing the filter as appropriate. To remove a filter from the user Filter list, point to the filter and click x that appears to the right.

  7. Instruct the user to log out and close the SEM Console.

  8. In the SEM Console, click Edit user for the targeted user.

  9. Click the Role drop-down menu, select Monitor, and then click Save.

  10. Instruct the user to log in to the SEM Console with their user credentials, and then click Monitor.

    The user should only see the specified filters.