Security organizations usually are comprised of multiple individuals, and management of the overall system is generally delegated to different people according to some logical categorization—by department, by geographic location, by system (that is, the email servers, the Web servers), and so on. In Trellix IPS, you delegate the management of system components by organizing the components logically into admin domains and then granting various management privileges for the domains to your Trellix IPS users.
The Manager enables the creation of multiple users within the system, and enables Super Users to grant specific privilege rules, called roles, to those users to allow them to manage an admin domain and any of its children. Within each admin domain, permission to carry out tasks is limited to only those users with appropriate roles.
For example, recall that a child admin domain can consist of something as granular as an interface on a Trellix IPS Sensor. You use roles to specify who can do what with that interface in that child domain.