User Role and Permission
This document will explain the roles and permissions which can be mapped for users. For roles related to Endpoint security, click here.
The default roles available in Endpoint Central are given below:
- Administrator
A user with Administrator role will have complete access to all the features available in Endpoint Central.
- Auditor
| Module Name | Full Control | Write | Read | No Access |
|---|---|---|---|---|
| Desktop Control | ||||
| Configurations |
|
|
|
|
| Patch Management |
|
|
|
|
| Software Deployment |
|
|
|
|
| Inventory |
|
|
|
|
| Tools |
|
|
|
|
| Remote Desktop Sharing |
|
|
|
|
| Report |
|
|
|
|
| SoM |
|
|
|
|
| MDM Control | ||||
| Profile Management |
|
|
|
|
| App Management |
|
|
|
|
| Inventory |
|
|
|
|
| Report |
|
|
|
|
| Enrollment |
|
|
|
|
| Content Management |
|
|
|
|
| OS Update Management |
|
|
|
|
| Remote Control |
|
|
|
|
| OSD Control | ||||
| Imaging |
| -- |
|
|
| Deployment |
| -- |
|
|
- Guest
| Module Name | Full Control | Write | Read | No Access |
|---|---|---|---|---|
| Desktop Control | ||||
| Configurations |
|
|
|
|
| Patch Management |
|
|
|
|
| Software Deployment |
|
|
|
|
| Inventory |
|
|
|
|
| Tools |
|
|
|
|
| Remote Desktop Sharing |
|
|
|
|
| Report |
|
|
|
|
| SoM |
|
|
|
|
| MDM Control | ||||
| Profile Management |
|
|
|
|
| App Management |
|
|
|
|
| Inventory |
|
|
|
|
| Report |
|
|
|
|
| Enrollment |
|
|
|
|
| Content Management |
|
|
|
|
| OS Update Management |
|
|
|
|
| Remote Control |
|
|
|
|
| OSD Control | ||||
| Imaging |
| -- |
|
|
| Deployment |
| -- |
|
|
- IT Asset Manager
| Module Name | Full Control | Write | Read | No Access |
|---|---|---|---|---|
| Desktop Control | ||||
| Configurations |
|
|
|
|
| Patch Management |
|
|
|
|
| Software Deployment |
|
|
|
|
| Inventory |
|
|
|
|
| Tools |
|
|
|
|
| Remote Desktop Sharing |
|
|
|
|
| Report |
|
|
|
|
| SoM |
|
|
|
|
| MDM Control | ||||
| Profile Management |
|
|
|
|
| App Management |
|
|
|
|
| Inventory |
|
|
|
|
| Report |
|
|
|
|
| Enrollment |
|
|
|
|
| Content Management |
|
|
|
|
| OS Update Management |
|
|
|
|
| Remote Control |
|
|
|
|
| OSD Control | ||||
| Imaging |
| -- |
|
|
| Deployment |
| -- |
|
|
- Mobile Device Manager
| Module Name | Full Control | Write | Read | No Access |
|---|---|---|---|---|
| Desktop Control | ||||
| Configurations |
|
|
|
|
| Patch Management |
|
|
|
|
| Software Deployment |
|
|
|
|
| Inventory |
|
|
|
|
| Tools |
|
|
|
|
| Remote Desktop Sharing |
|
|
|
|
| Report |
|
|
|
|
| SoM |
|
|
|
|
| MDM Control | ||||
| CreateProfile Management |
|
|
|
|
| CreateApp Management |
|
|
|
|
| CreateInventory |
|
|
|
|
| CreateReport |
|
|
|
|
| Enrollment |
|
|
|
|
| Content Management |
|
|
|
|
| OS Update Management |
|
|
|
|
| Remote Control |
|
|
|
|
| OSD Control | ||||
| Imaging |
| -- |
|
|
| Deployment |
| -- |
|
|
- OS Deployer
| Module Name | Full Control | Write | Read | No Access |
|---|---|---|---|---|
| Desktop Control | ||||
| Configurations |
|
|
|
|
| Patch Management |
|
|
|
|
| Software Deployment |
|
|
|
|
| Inventory |
|
|
|
|
| Tools |
|
|
|
|
| Remote Desktop Sharing |
|
|
|
|
| Report |
|
|
|
|
| SoM |
|
|
|
|
| MDM Control | ||||
| Profile Management |
|
|
|
|
| App Management |
|
|
|
|
| Inventory |
|
|
|
|
| Report |
|
|
|
|
| Enrollment |
|
|
|
|
| Content Management |
|
|
|
|
| OS Update Management |
|
|
|
|
| Remote Control |
|
|
|
|
| OSD Control | ||||
| Imaging |
| -- |
|
|
| Deployment |
| -- |
|
|
- Patch Manager
| Module Name | Full Control | Write | Read | No Access |
|---|---|---|---|---|
| Desktop Control | ||||
| Configurations |
|
|
|
|
| Patch Management |
|
|
|
|
| Software Deployment |
|
|
|
|
| Inventory |
|
|
|
|
| Tools |
|
|
|
|
| Remote Desktop Sharing |
|
|
|
|
| Report |
|
|
|
|
| SoM |
|
|
|
|
| MDM Control | ||||
| CreateProfile Management |
|
|
|
|
| CreateApp Management |
|
|
|
|
| Inventory |
|
|
|
|
| Report |
|
|
|
|
| Enrollment |
|
|
|
|
| Content Management |
|
|
|
|
| OS Update Management |
|
|
|
|
| Remote Control |
|
|
|
|
| OSD Control | ||||
| Imaging |
| -- |
|
|
| Deployment |
| -- |
|
|
- Remote Desktop Viewer
| Module Name | Full Control | Write | Read | No Access |
|---|---|---|---|---|
| Desktop Control | ||||
| Configurations |
|
|
|
|
| Patch Management |
|
|
|
|
| Software Deployment |
|
|
|
|
| Inventory |
|
|
|
|
| Tools |
|
|
|
|
| Remote Desktop Sharing |
|
|
|
|
| Report |
|
|
|
|
| SoM |
|
|
|
|
| MDM Control | ||||
| Profile Management |
|
|
|
|
| App Management |
|
|
|
|
| Inventory |
|
|
|
|
| Report |
|
|
|
|
| Enrollment |
|
|
|
|
| ontent Management |
|
|
|
|
| OS Update Management |
|
|
|
|
| Remote Control |
|
|
|
|
| OSD Control | ||||
| Imaging |
| -- |
|
|
| Deployment |
| -- |
|
|
- Technician
| Module Name | Full Control | Write | Read | No Access |
|---|---|---|---|---|
| Desktop Control | ||||
| Configurations |
|
|
|
|
| Patch Management |
|
|
|
|
| Software Deployment |
|
|
|
|
| Inventory |
|
|
|
|
| Tools |
|
|
|
|
| Remote Desktop Sharing |
|
|
|
|
| Report |
|
|
|
|
| SoM |
|
|
|
|
| MDM Control | ||||
| Profile Management |
|
|
|
|
| App Management |
|
|
|
|
| Inventory |
|
|
|
|
| Report |
|
|
|
|
| Enrollment |
|
|
|
|
| Content Management |
|
|
|
|
| OS Update Management |
|
|
|
|
| Remote Control |
|
|
|
|
| OSD Control | ||||
| Imaging |
| -- |
|
|
| Deployment |
| -- |
|
|
Roles related to Endpoint Security
| Action | Full Control | Write | Read | |
|---|---|---|---|---|
| Application Control Manager | ||||
| Application Control |
|
|
| |
| Application Control Reports |
|
|
| |
| Bitlocker Manager | ||||
| Bitlocker |
|
|
| |
| Bitlocker Reports |
|
|
| |
| Browser Security Manager | ||||
| Browser Security |
|
|
| |
| Device Control Manager | ||||
| Device Control |
|
|
| |
| Device Control Reports |
|
|
| |
| Security Manager | ||||
| Patch Management |
|
|
| |
| Vulnerbility Management |
|
|
| |
| Browser Security |
|
|
| |
| Device Control |
|
|
| |
| Bitlocker |
|
|
| |
| Application Control |
|
|
| |
| Reports |
|
|
| |
| Scope of Management |
|
|
| |
You can also create roles and customize it based on your requirement. The below table explains in detail about the permissions that can be specified while creating/modifying a role in Endpoint Central.
- For build numbers below 100646
- For build numbers 100646 or above
| Action | Full Control | Write | Read | |
|---|---|---|---|---|
| Configuration | ||||
| CreateConfigurations (Users and Computers) |
|
|
| |
| Create Configurations from templates |
|
|
| |
| Create Configurations from Collections (Users and Computers) |
|
|
| |
| Install software |
|
|
| |
| Install patches |
|
|
| |
| View Configurations |
|
|
| |
| Edit Configurations |
|
|
| |
| Delete Configurations |
|
|
| |
| 'Save as New' from Configurations |
|
|
| |
| Power Management Configuration |
|
|
| |
| Patch Mgmt. | ||||
| Install Patches |
|
|
| |
| Automate Patch Deployment (APD) |
|
|
| |
| APD Task List View |
|
|
| |
| Edit or Delete APD |
|
|
| |
| View Configurations |
|
|
| |
| View Deployment Templates & Add Templates |
|
|
| |
| Edit or Delete Deployment Templates |
|
|
| |
| Approve/Decline/Un Approve - Applicable Patches |
|
|
| |
| Download / Re-download /Delete Patches |
|
|
| |
| Deploy Missing Patches to All Managed Systems |
|
|
| |
| Scan/Scan All |
|
|
| |
| Patch Report |
|
|
| |
| Patch Settings (Except Proxy ) |
|
|
| |
| Update Vulnerability Database |
|
|
| |
Software Deployment | ||||
| Create Software Package |
|
|
| |
| Install/uninstall Software (Computer) |
|
|
| |
| Install/uninstall Software (User) |
|
|
| |
| Create Package from Templates |
|
|
| |
| View Configurations |
|
|
| |
| Deployment Templates |
|
|
| |
| Software Repository Settings |
|
|
| |
| Sync Application Details |
|
|
| |
| Self Service Portal |
|
|
| |
| Self Service Portal Settings |
|
|
| |
| 'Save as New' from Packages |
|
|
| |
Inventory | ||||
| Computers View (Bulk Update/ Import CSV) |
|
|
| |
| Computers View - Import CSV |
|
|
| |
| Add / Modify Computer Details |
|
|
| |
| Hardware's View |
|
|
| |
| Software View |
|
|
| |
| Move Software To |
|
|
| |
| Alerts settings |
|
|
| |
| Inventory Reports |
|
|
| |
| Scan/Scan all Systems |
|
|
| |
| Software Metering (Add/Delete/Enable/Disable Rule) |
|
|
| |
| Manage License |
|
|
| |
| Group software |
|
|
| |
| Configure Prohibited Software |
|
|
| |
| Block executables |
|
|
| |
| File scan rules |
|
|
| |
| Add Global Exclusions |
|
|
| |
| Manage Software Category |
|
|
| |
| Configure Alerts |
|
|
| |
| Schedule Inventory Scan |
|
|
| |
| Feed Custom Data for Computers |
|
|
| |
Tools | ||||
| Remote Control Computer view |
|
|
| |
| Remote Control History view |
|
|
| |
| Settings |
|
|
| |
| User Confirmation & Exclude Computers |
|
|
| |
| Screen Recording |
|
|
| |
| Performance |
|
|
| |
| Wake On LAN - Wake up & schedule wake up |
|
|
| |
| Remote Shutdown - Shutdown now & schedule shutdown |
|
|
| |
| System Tools - Action & Functionality |
|
|
| |
| Announcement |
|
|
| |
| Chat |
|
|
| |
| System Manager tools (Except Command Prompt, Registry & File Manager) |
|
|
| |
| System Manager Tools - Command Prompt, Registry & File Manager |
|
|
| |
Reports | ||||
| Schedule Reports |
|
|
| |
| Custom Reports |
|
|
| |
| Active Directory Reports |
|
|
| |
| Reports from Other Modules |
|
|
| |
SoM | ||||
| Add/Remove computers |
|
|
| |
| Edit credential |
|
|
| |
| Install/uninstall agent |
|
|
| |
| Remote Offices |
|
|
| |
| IP Scope |
|
|
| |
| SOM Policy |
|
|
| |
| Agent settings |
|
|
| |
Global Settings | ||||
| User Administration |
|
|
| |
| Help Desk Settings |
|
|
| |
| ServiceDesk Plus Settings |
|
|
| |
| Server Settings |
|
|
| |
| Mail Server Settings |
|
|
| |
| Custom Groups |
|
|
| |
| Re-branding |
|
|
| |
| PgSQL Remote DB Access |
|
|
| |
| DC Server Migration |
|
|
| |
| Configuration Settings |
|
|
| |
| Security Settings |
|
|
| |
| Import SSL Certificates |
|
|
| |
| Privacy Settings |
|
|
| |
| Forwarding Server |
|
|
| |
| DPO Dashboard |
|
|
| |
| Export Settings |
|
|
| |
| Server Maintenance |
|
|
| |
| Failover Server |
|
|
| |
| NAT Settings |
|
|
| |
| MSSQL Migration |
|
|
| |
| DB Optimization |
|
|
| |
Report Settings | ||||
| AD Report Settings |
|
|
| |
| User Logon Settings |
|
|
| |
Admin Tools | ||||
| Action Log Viewer |
|
|
| |
| Alerts |
|
|
| |
| Database Backup |
|
|
| |
The permissions for users with write access in software deployment module have been revised from build number 100646 as per customer request. Refer the below table to find out the changes made.
| Action | Full Control | Write | Read | |
|---|---|---|---|---|
| Configuration | ||||
| CreateConfigurations (Users and Computers) |
|
|
| |
| Create Configurations from templates |
|
|
| |
| Create Configurations from Collections (Users and Computers) |
|
|
| |
| Install software |
|
|
| |
| Install patches |
|
|
| |
| View Configurations |
|
|
| |
| Edit Configurations |
|
|
| |
| Delete Configurations |
|
|
| |
| 'Save as New' from Configurations |
|
|
| |
| Power Management Configuration |
|
|
| |
| Patch Mgmt. | ||||
| Install Patches |
|
|
| |
| Automate Patch Deployment (APD) |
|
|
| |
| APD Task List View |
|
|
| |
| Edit or Delete APD |
|
|
| |
| View Configurations |
|
|
| |
| View Deployment Templates & Add Templates |
|
|
| |
| Edit or Delete Deployment Templates |
|
|
| |
| Approve/Decline/Un Approve - Applicable Patches |
|
|
| |
| Download / Re-download /Delete Patches |
|
|
| |
| Deploy Missing Patches to All Managed Systems |
|
|
| |
| Scan/Scan All |
|
|
| |
| Patch Report |
|
|
| |
| Patch Settings (Except Proxy ) |
|
|
| |
| Update Vulnerability Database |
|
|
| |
Software Deployment | ||||
| Create Software Package |
|
|
| |
| Install/uninstall Software (Computer) |
|
|
| |
| Install/uninstall Software (User) |
|
|
| |
| Create Package from Templates |
|
|
| |
| View Configurations |
|
|
| |
| Deployment Templates |
|
|
| |
| Software Repository Settings |
|
|
| |
| Sync Application Details |
|
|
| |
| Self Service Portal |
|
|
| |
| Self Service Portal Settings |
|
|
| |
| 'Save as New' from Packages |
|
|
| |
Inventory | ||||
| Computers View (Bulk Update/ Import CSV) |
|
|
| |
| Computers View - Import CSV |
|
|
| |
| Add / Modify Computer Details |
|
|
| |
| Hardware's View |
|
|
| |
| Software View |
|
|
| |
| Move Software To |
|
|
| |
| Alerts settings |
|
|
| |
| Inventory Reports |
|
|
| |
| Scan/Scan all Systems |
|
|
| |
| Software Metering (Add/Delete/Enable/Disable Rule) |
|
|
| |
| Manage License |
|
|
| |
| Group software |
|
|
| |
| Configure Prohibited Software |
|
|
| |
| Block executables |
|
|
| |
| File scan rules |
|
|
| |
| Add Global Exclusions |
|
|
| |
| Manage Software Category |
|
|
| |
| Configure Alerts |
|
|
| |
| Schedule Inventory Scan |
|
|
| |
| Feed Custom Data for Computers |
|
|
| |
Tools | ||||
| Remote Control Computer view |
|
|
| |
| Remote Control History view |
|
|
| |
| Settings |
|
|
| |
| User Confirmation & Exclude Computers |
|
|
| |
| Screen Recording |
|
|
| |
| Performance |
|
|
| |
| Wake On LAN - Wake up & schedule wake up |
|
|
| |
| Remote Shutdown - Shutdown now & schedule shutdown |
|
|
| |
| System Tools - Action & Functionality |
|
|
| |
| Announcement |
|
|
| |
| Chat |
|
|
| |
| System Manager tools (Except Command Prompt, Registry & File Manager) |
|
|
| |
| System Manager Tools - Command Prompt, Registry & File Manager |
|
|
| |
Reports | ||||
| Schedule Reports |
|
|
| |
| Custom Reports |
|
|
| |
| Active Directory Reports |
|
|
| |
| Reports from Other Modules |
|
|
| |
SoM | ||||
| Add/Remove computers |
|
|
| |
| Edit credential |
|
|
| |
| Install/uninstall agent |
|
|
| |
| Remote Offices |
|
|
| |
| IP Scope |
|
|
| |
| SOM Policy |
|
|
| |
| Agent settings |
|
|
| |
Global Settings | ||||
| User Administration |
|
|
| |
| Help Desk Settings |
|
|
| |
| ServiceDesk Plus Settings |
|
|
| |
| Server Settings |
|
|
| |
| Mail Server Settings |
|
|
| |
| Custom Groups |
|
|
| |
| Re-branding |
|
|
| |
| PgSQL Remote DB Access |
|
|
| |
| DC Server Migration |
|
|
| |
| Configuration Settings |
|
|
| |
| Security Settings |
|
|
| |
| Import SSL Certificates |
|
|
| |
| Privacy Settings |
|
|
| |
| Forwarding Server |
|
|
| |
| DPO Dashboard |
|
|
| |
| Export Settings |
|
|
| |
| Server Maintenance |
|
|
| |
| Failover Server |
|
|
| |
| NAT Settings |
|
|
| |
| MSSQL Migration |
|
|
| |
| DB Optimization |
|
|
| |
Report Settings | ||||
| AD Report Settings |
|
|
| |
| User Logon Settings |
|
|
| |
Admin Tools | ||||
| Action Log Viewer |
|
|
| |
| Alerts |
|
|
| |
| Database Backup |
|
|
| |
