In the ePO - On-prem server, administrator rights management determines the actions that ePO - On-prem users can perform while administrating Trellix FRP.
A permission set is a group of permissions that can be granted to Active Directory or Entra ID users or groups by assigning it to those users’ accounts. One or more permission sets can be assigned to users who are not global administrators. (Global administrators have all permissions to all products and features.)
User accounts and their associated permission sets define the tasks that the users can perform. This allows you to restrict specific users or groups from misusing Trellix FRP features.