How do I customize permissions on roles?
Within our organization, we'd like two tiers of personnel.
The first is easy, as its just SCOM Admins.
For the second group, we'd like to give the users all of the "Operators" privileges plus we'd like to allow them to install agents (by discovery and manually).
Is it possible to do this? I created a new role based on Operators, but couldn't figure out how to add permissions to that.
Thanks!
Brian
June 3rd, 2012 1:52pm
Hi
This isn't possible - you need to be an administrator to deploy agents.
You might want to consider:
- using AD integration
- scripted installs
http://technet.microsoft.com/en-us/library/cc950511.aspx
- SCCM
- Group policy
Cheers
GrahamRegards Graham New System Center 2012 Blog! -
http://www.systemcentersolutions.co.uk
View OpsMgr tips and tricks at
http://systemcentersolutions.wordpress.com/
Free Windows Admin Tool Kit Click here and download it now
June 3rd, 2012 2:16pm
Hi Brian, managing agents can only be done with administrator rights. Only way around it is manual agent installs (with the admin approving or setting to auto approve). but the whole administration pane is only for administrators. so discovery -> administrator.
Manual install agents -> need rights on the box where you install the agent. Depending on which agent approval settings you set for the management group on the admin level once.Bob Cornelissen - BICTT (My Blog about SCOM) - MVP 2012 and Microsoft Community Contributor 2011 Recipient
June 3rd, 2012 2:18pm