Grant/Revoke System Management

System Owner can grant or revoke system management permissions for other users. Users with system management permissions can view and configure system-level settings in the web portal.

This article explains how to grant and revoke System Management permissions, what access changes for affected users, and security best practices.

How to grant system management

1. Log in to Gateway web console and navigate to Management > Users.
2. 
3. Locate the user you want to update.
4. Click the gear button and find the "Grant system management" option for that user.

4. Click the option and confirm the change in the confirmation dialog.

How to revoke system management

1. Log in to Gateway web console and navigate to Management > Users.
2. Locate the user who is granted system management.
3. Click the gear button and find the "Revoke system management" option for that user.

4. Click the option and confirm the change in the confirmation dialog.

What system management permissions include

Once granted system management, a user can access system-related settings pages in the web portal and modify system-level configurations, including but not limited to:

• Security settings

• Backup and restore settings

• License management

• System monitoring

• Network settings

• SMTP settings

• Syslog settings, etc.

Users without system management will not see system-related pages or settings in the web portal.

Quick filter

The system owner can view the users who have been granted system management by filtering.

Security best practices

Because the system management grants access to critical system configurations, we strongly recommend the following for all users with this permission:

• Enable 2FA:  Users with system management should have Two-Factor Authentication enabled on their accounts. This adds an extra layer of protection in case credentials are compromised.
• Limit access: Only grant system management to users who genuinely need it. Regularly review the User Management page to ensure permissions remain appropriate.
• Revoke promptly: If a user no longer requires system access (e.g., role change, offboarding), revoke the permission immediately.