The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Parent and child admin domains

Prev Next

Perhaps managing "My Company's" entire Trellix IPS deployment from London is impractical. It might make more sense to delegate management of the Trellix IPS resources protecting various geographical locations to entities in those locations. To delegate management functions to each of the four offices, you would create a subdomain representing each office. These subdomains are called child admin domains or child domains.

Creating child domains enables you to delegate entities more familiar with the subdomain's environment to monitor and/or configure the IPS devices in that subdomain. You are not required to subdivide your admin domains into child domains; however, if you want to delegate responsibilities for managing Trellix IPSTrellix IPS resources among multiple individuals within your organization, you do so by creating child domains.

Note

To delegate responsibilities, you create user accounts and give each user a role that defines how the user can interact with the resources in the child admin domain. For more information on roles, see Management of users and user roles.

You can further break child domains into smaller subdomains. Any domain with child domains is a parent. A child domain can be parent to other child domains.

You can subdivide your Root Admin Domain into child domains that are large, from a resource perspective, delegating management of all the Trellix IPS resources protecting multiple geographic regions. Or you can create domains that are very small—a few interfaces on a single Sensor, or even a VLAN tag or CIDR address within a segment of traffic transmitting between two hosts in the protected network.