Which User Roles are on the Endpoint Security Management Server for On-Premises servers?

The Check Point on-premises Endpoint Security Management Server provides a straightforward permissions model with two distinct administrator roles. The 'Admin' role grants full permissions to view and modify all settings, policies, and objects within the management server. The 'Read-Only' role allows an administrator to view all configurations and reports but prevents them from making any changes, ensuring separation of duties and preventing accidental modifications.

A. Primary Administrator and Read-Only: 'Primary Administrator' is not a defined role within the on-premises Endpoint Security Management Server's native user management.
B. Super Admin, Primary Administrator, User Admin, Read-Only: This list includes roles that are not standard for the Endpoint Security Management Server; these are more aligned with other Check Point products.
D. Super Admin, Read-Write All, Read-Only: 'Super Admin' and 'Read-Write All' are roles associated with the main R8x SmartConsole for gateway management, not the specific roles for Endpoint Management.

Check Point Software Technologies Ltd. (2023). Harmony Endpoint E87.30 On-Premises Management Administration Guide. Chapter "Administrators", Section "Creating an Administrator Account", page 38. This document explicitly states, "There are two types of Endpoint Security administrators: Admin and Read-Only."

Check Point Software Technologies Ltd. (2021). Endpoint Security E84.70 Administration Guide for On-Premises Management. Chapter 3, "Getting Started with Endpoint Security Management", Section "Administrators", page 36. This guide confirms the two roles are "Admin" and "Read-Only".