The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Role descriptions

Prev Next

The following section summarizes the Trellix IPS-provided user roles.

Roles and Descriptions

Role

Descriptions

ePO Dashboard Data Retriever

The ePO Dashboard Data Retriever has rights to retrieve information from Trellix IPS to ePO - On-prem for displaying Trellix IPS information in ePO - On-prem.

Policy Administrator

The Policy Administrator administers the intrusion prevention environment.

NOC Operator

The NOC Operator monitors the security environment.

Report Generator

The Report Generator runs reports.

Security Expert

The Security Expert role manages intrusion policies. The Security Expert administers the IPS environment. The Security Expert can create, edit, and delete policies, view alerts, manage software and signature update downloads, generate reports, manage system faults, and handle security alerts.

Super User

The Super User role (not represented by an icon) enjoys all privileges. Each shipped Manager is configured with one built-in Super User account, including a default password.

The Super User role provides:

  • All the privileges possible in the current domain

  • All the privileges a Super User has in all the children of the current domain

  • The special privilege to assign (or remove) the Super User role for a user in the current domain

A Super User can be defined at any level, and the role applies to the current domain and all of its children, but not for its parent domain or any other "sibling" domains.

System Administrator

The System Administrator role pertains strictly to administration of the system itself. The System Administrator administers the Manager and the Device List. The System Administrator manages software and system performance, adds, configures, and deletes Sensors, and handles system faults.