Home > SCCM, SCCM Permissions > SCCM 2007 Role Based Permissions–Support

SCCM 2007 Role Based Permissions–Support


This post focuses on setting permissions for a support role. This role will have read access to resources, read access to reports, the ability to remote control a user’s device, and abilities within the computer association feature for user state.

  1. Create a security group in AD named “SCCM Support”
  2. Using credentials that have administrator access to SCCM open the full console
  3. Navigate to “System Center Configuration Manager – Site Database – Security Rights – Users”
    image
  4. Right click on “Users” and select “Manage ConfigMgr Users”
    image
  5. Click “Next”
    image
  6. Click “Browse”
    image
  7. Navigate to the “SCCM Support” group you created earlier
    image
  8. Click “Next”
    image
  9. Click on “Add another right or modify an existing one” and click “Next”
    image
  10. For “Collection” – “(All Instances)” add the following:
    – “Delete resource”
    – “Modify resource”
    – “Read”
    – “Read resource”
    – “Use remote tools”
  11. For “Report” – “(All Instances)” add the following:
    – “Read”
  12. For “Computer association” – “(All Instances)” add the following:
    – “Create”
    – “Delete”
    – “Read”
    – “Recover user state”
  13. Click “Next”
  14. Click “Next”
  15. Click “Close”
Advertisements
Categories: SCCM, SCCM Permissions

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: