An administrative domain, or admin domain for short, is an organizational tool used specifically to group Trellix IPS resources so that management of the resources can be delegated to specific Trellix IPS users.
An admin domain can contain other admin domains, Trellix IPS Sensors, Sensor interfaces, and Sensor sub-interfaces. This administrative domain concept enables enterprises to create a central authority that is responsible for the overall Trellix IPS, and to allow this central authority to delegate day-to-day operations of Trellix IPS security resources to appropriate entities—business units, geographic regions, IT departments, individual security personnel, and so on.
Root Admin Domain
The top level admin domain is called the Root Admin Domain. Users with Super User access to the Root Admin Domain have complete control over the entire administrative domain and all resources within it, including any child domains, and thus all security resources in the system.
For example, suppose your company (which we'll call My Company) is headquartered in London, and has satellite offices in New York, Paris, and San Francisco. If your Trellix IPS deployment monitors the entire company, your Root Admin Domain could encompass all four sites and all of the Trellix IPS components within the environment, and you could manage the entire system from London.
The admin domain is displayed at the top of the tab tree across the Policy, Manager, and Devices tabs. The root admin domain is labeled "My Company".