HP Enterprise printers and scanners - Imaging and Printing Security Best Practices (white paper)

Advanced Security for Multiple HP Devices
This chapter will provide some tips for configuring HP security features that require network specific information to operate
correctly using HP Web Jetadmin. This chapter will also provide some special recommendations for those using customized HP
solutions. These features should be installed before locking down your MFPs using the settings in the next chapter. This allows
adequate testing of your security solution to be completed while you still have open access to your devices. If you are looking for
information in this section that is not contained in this document, you can refer to the MFP User Guides and the HP Jetdirect
Administrator Guide for more information. You can find these documents and more information by searching for it at hp.com.
Access Control for Device Functions
Access Control for Device Functions replaces control panel lock and authentication manager configuration options. It allows you to
restrict access to a device by permission set and require specific types of authentication by device function. For example, you could
configure this feature to allow guest walk up users to an MFP access to only the copy feature while scan to folder or scan to email
are available to authenticated users.
You can configure Access Control for Device Functions by:
On the Config tab click Access Control for Device Functions (Figure 55) under the Security Category.
Figure 52: The Access for Device Functions option.
In the right-hand pane you will see the default permission sets, you can also create custom permission sets for advanced
configurations. If would like new accounts to be created with a default set of permissions, you will need to set this under the Device
User Accounts option.
Figure 53: The Access for Device Functions option.
To set access control for each of these permission sets check or un-check the box in that permission set column for access to that
function. If you would like a special kind of authentication you can also set the sign in method for that device function.