Providing limited access to SCCM 2012 R2 console RRS feed

  • Question

  • Hi All,

    I have enabled Mobile Device support in SCCM 2012 R2. Everything is fine there.

    Now question is if I build this solution for one of our customer and allow them to manage the MDM system.
    Here our company policy says we can't allow full access to SCCM console, if we do, end user may messed up with settings.

    So I am wondering if its possible to step the MDM solution and for the End Customer's administrators provide a subset of the console?

    Or something else .... I don't know if its really possible? May I have an expert advise?


    Wednesday, January 15, 2014 8:16 PM


All replies

  • That can be done using RBA. I can't tell Details because you did not mention any detailed requirements.

    Torsten Meringer | http://www.mssccmfaq.de

    Wednesday, January 15, 2014 8:34 PM
  • Thanks Torsten for reply.

    I am working as distributor, selling MDM solution with SCCM 2012 R2.

    Solution would be sold to SMBs, may be a school ... my company don't want to allow the school administrator to permit full control on SCCM console.

    Is that enough ?


    Wednesday, January 15, 2014 8:48 PM
  • You did not define "limited" ... Just see http://technet.microsoft.com/en-us/library/hh427332.aspx#BKMK_ConfigureRBA about using RBA (role based administration).

    Torsten Meringer | http://www.mssccmfaq.de

    Thursday, January 16, 2014 7:01 AM
  • Thanks for reply, for Limitmed access I mean, if we can DISABLE or hide the Operating System, boot image,  Node, Software Update Note from SCCM Console for example.

    And user will interact only with MOBILE DEVICES COLLECTION and Compliance Settings (I am not sure if its possible)


    Thursday, January 16, 2014 8:04 AM
  • Sure, you might have to create a custom security role though. RBA viewer (part of the toolkit) will help.

    Torsten Meringer | http://www.mssccmfaq.de

    Thursday, January 16, 2014 8:23 AM
  • Thanks Torsten for reply.

    Would be great if you can elaborate a bit because I haven't used RBA Viewer before.


    Thursday, January 16, 2014 10:10 AM