Configuration administrators have the rights to edit and assign SSH Tectia configurations to servers and workstations, but they do not have the rights to deploy the configuration changes they have made. This enforces the so-called "four-eyes principle", which prevents a single person from deploying a change of security settings to the environment.

Define the configuration administrator role for instance as shown in Figure 5.2.

Figure 5.2. Configuration administrator rights