Sign in
Microsoft.com
 
System Center Configuration Manager TechCenter
 
 
 
System Center Configuration Manager TechCenter > System Center Configuration Manager Forums > Configuration Manager Admin Console > Role based Permission - Monitor updates & Generate Reports
Ask a questionAsk a question
Search Forums:
 

AnswerRole based Permission - Monitor updates & Generate Reports

  • Tuesday, November 03, 2009 7:32 AMAzmathulla Shaik Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Hi

    Want to set permissions on SCCM console to helpdesk user so that he can perform only the following actions, can any one let me know how to go about this.

    1. Monitor the latest available windows/office updates .
    2. Generate the reports.

    Thanks,
    Azm
     

Answers

  • Tuesday, November 10, 2009 12:23 PMKim Oppalfens [MVP]MVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    There is actually a report for the new/not approved updates that are required for your environment.
    Management 1 - Updates required but not deployed

    Which would be a much cleaner solution for these people than giving them a console, seems rather obvious these are "management type" users.
    "Everyone is an expert at something" Kim Oppalfens Configmgr expert for lack of any other expertise. http://www.scug.be/blogs/sccm
     

All Replies

  • Tuesday, November 03, 2009 7:51 AMKent Agerlund Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Hi Azm,

    1) You can subscribe to the Monthly security mail from Micrsoft. It contains information about upcoming patches
    2) To review reports they need to have read permissions to the reports in the ConfigMgr Adm. console and be members of the local SMS Reporting users group on the reporting point.

    Kent Agerlund | http://scug.dk/members/Agerlund/default.aspx | The Danish community for System Center products
     
  • Tuesday, November 03, 2009 9:13 AMAzmathulla Shaik Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Hi kent

    Thanks for the reply, we can subscribe to the monthly security mail.

    1. But actually in SCCM console there is folder named software updates under which there are customised search folders which shows the list of updates for particular product just for last month alone. so is there a way i can allow some one to have access to only to that folder? so that they can see what are the latest updates.

    2. i will add the user account to local SMS reporting group and also give read permission on config.mgr (SCCManager->Security Rights->Users->add user->Class - Report & instance - All instances & Rights - Read) and see if it can solve my problem.

    thanks
    Azm
     
  • Tuesday, November 10, 2009 9:03 AMWallyMSFT, OwnerUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    I don't recall that you can set rights on search folders. I think they need rights to see the appropriate update class in Updates Repository.
    Wally Mead
     
  • Tuesday, November 10, 2009 12:23 PMKim Oppalfens [MVP]MVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    There is actually a report for the new/not approved updates that are required for your environment.
    Management 1 - Updates required but not deployed

    Which would be a much cleaner solution for these people than giving them a console, seems rather obvious these are "management type" users.
    "Everyone is an expert at something" Kim Oppalfens Configmgr expert for lack of any other expertise. http://www.scug.be/blogs/sccm