The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Role descriptions

Prev Next

The following section summarizes the Trellix IPS-provided user roles in the Central Manager.

Roles and Descriptions

Role

Descriptions

ePO Dashboard Data Retriever

The ePO Dashboard Data Retriever has rights to retrieve information from Trellix IPS to ePO for displaying Trellix IPS information in the ePO.

NOC Operator

The NOC Operator monitors the security environment.

Report Generator

The Report Generator runs reports.

Security Expert

The Security Expert role largely pertains to managing intrusion policies. The Security Expert administers the IPS environment. The Security Expert can create, edit, and delete policies, view alerts, manage software and signature update downloads, generate reports, manage system faults, and handle security alerts.

Super User

The Super User role (not represented by an icon) enjoys all privileges. Each shipped Manager is configured with one built-in Super User account including a default password.

The Super User role provides:

  • all the privileges possible in the current domain

  • all the privileges a Super User has in all the children of the current domain

  • the special privilege to assign (or remove) the Super User role for a user in the current domain

A Super User can be defined at any level, and the role applies to the current domain and all of its children, but not for its parent domain or any other "sibling" domains.

System Administrator

The System Administrator role pertains strictly to administration of the system itself. The System Administrator administers the Manager and the Device List. Tasks permitted to the System Administrator include managing software and system performance; adding, deleting, or configuring Sensors, and handling system faults.

No Role

No role is assigned to the user.