In the server, administrator rights management determines the actions that ePO - SaaS users can perform while administrating Trellix FRP.
A permission set is a group of permissions that can be granted to users or Active Directory (AD) groups by assigning it to those users’ accounts. One or more permission sets can be assigned to users who are not global administrators. (Global administrators have all permissions to all products and features).
User accounts and their associated permission sets define the tasks that the users can perform. This allows you to restrict specific users or groups from misusing Trellix FRP features.