2.3 – AccessControl
Canon imageRUNNER ADVANCEsystems support a number of access controloptions to help you
manage the use ofdevice settings and functions in addition to specific capabilities of certain
functions. Accesscontrol solutions for the imageRUNNER ADVANCEcan help Authentication,
Authorization, and Auditing. Canon offerssolutions that can lock down the entire device, or simply
lockdown specific functions (e.g. Send-to-Email), while leaving other applications available for
generaluse. With the power and flexibility of MEAP, some solutionscan be customized to meet your
specificrequirements.

Password-Protected System Settings

Asa standard feature, imageRUNNER ADVANCE systems setup screens support password
protection to restrictdevice setting changes from the control panel and Remote UI tool. System
Administratorscan set network information, system configuration, enable, and disable networkand
printing protocolsamong many other options. Canon highly recommends setting an administrator
password attime of installation since it controls critical device settings.

AccessManagement System

The AccessManagement System, which is standard on imageRUNNER ADVANCEsystems, can be used
to tightlycontrol access to device functionality. Restrictions can be assigned to usersand groups, to
restrictentire functions or restrict specific features within a function. Access restrictionsare managed
in unitscalled “roles”. Roles contain information that determines which of the various functions of
the device maybe used or not.
Rolescan be set up based on individual user’s job title or responsibilities or by group, enabling the
administrator to create rolesspecific to certain departments or workgroups. Since the administrator
isnot limited to restricting all or none of a particular function, the roles can be as specific as is
required for a number ofbusiness needs. Beyond the Base roles which contain default access
restrictions, up to 100 new Custom rolescan be registered for up to 5,000 users. The administrator
can also define whether to allow unregistered usersto log in as guests and then specify settings for
guestuser’s roles.
7
White Paper: Canon imageRUNNER ADVANCE Security
Section 2 — Device Security
System Manager Screen Store ID and Password Screen