Home > SCCM, SCCM Permissions > SCCM 2007 Role Based Permissions–Software Distribution

SCCM 2007 Role Based Permissions–Software Distribution


This post focuses on permissions to allow the distribution of software. I use this to enable support staff the ability to deploy very specific software. This in combination with Ron Crumbaker’s web remote tools found at http://www.myitforum.com/articles/19/view.asp?id=8662 is how I manage what the support staff has access to. Essentially, Ron’s tool references a top level collection and lists the sub collections as options for software to distribute. You can of course use the full console as well.

The key is that “Modify” permissions are required. Do not run out and give “Modify” permissions to everybody though…this allows the modification of direct membership and WQL queries. This is why I encourage the team to use the web console so they see only what they have permission to.

Please note that this is a pain in the you know what and needs to be combined with process…and it will only be as good as the process. But, if you have every had an oops that caused you pain you will be open to this.

Also, note that I keep this separate from the “SCCM Support” role because I make them go through training to earn the permissions. I can keep track easier this way.

  1. Create a security group in AD named “SCCM Software Distribution”
  2. Using credentials that have administrator access to SCCM open the full console
  3. Navigate to “System Center Configuration Manager – Site Database – Security Rights – Users”
    image_thumb[1]
  4. Right click on “Users” and select “Manage ConfigMgr Users”
    image_thumb[2]
  5. Click “Next”
    image_thumb[3]
  6. Click “Browse”
    image_thumb[7]
  7. Navigate to the “SCCM Software Distribution” group you created earlier
    Click “Next”
  8. Click on “Add another right or modify an existing one” and click “Next”
    image_thumb[8]
  9. For “Collection” – COLLECTIONNAME (where COLLECTIONNAME is a collection you want to grant permissions for add the following:
    – “Modify”
  10. Repeat for each collection
  11. Click “Next”
  12. Click “Next”
  13. Click “Close”
Advertisements
Categories: SCCM, SCCM Permissions
  1. No comments yet.
  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: