3 Replies Latest reply on Oct 4, 2017 9:49 AM by TomWhi

    Deployment Group - "Computer Admins"




      We have a scenario where our in house testing team would like to move computers between various deployment groups... I don't want them to be able to edit anything else (like packages, settings etc.) apart from to move a computer from one DG to another.


      I have looked at the security model but I've not managed to find a way to allow just this - without giving them more rights than I'd be comfortable with.



        • 1. Re: Deployment Group - "Computer Admins"
          Landon Winburn ITSMMVPGroup

          You need to create a new object role in the security tab and grant it computer assignment rights. Once you have done that go to the deployment group in question and add the user group and assign them the new role.



          • 2. Re: Deployment Group - "Computer Admins"
            randyb1 SupportEmployee
            1. Grant the user the "Viewer" role under Server Permissions. This allows the user to access the console.
            2. Create a new Object Security Role called "Computer Assignment" and grant the "Computer Assignment" permission to that role.
            3. Go into each Deployment Group (right-click and go to Security), add the User (under Permissions) and grant them the "Computer Assignment" role you created.


            This will give the user the ability to Add computers, Delete computers, poll, install the deployment agent, and modify membership rules.  That's a bit more than you're looking for, but seems to be the closest I can figure.

            • 3. Re: Deployment Group - "Computer Admins"

              Thank you chaps. That was perfect.  I managed to knock that scenario up in my lab and got it working. Now comes the excitement of trying to get it into Production past the change management team