Home » Role difference
 

Endpoint Central supports pre-defined and user-defined roles to manage their IT infrastructure. Users can customize roles according to their organization's policies and associate with a scope of devices to be managed. Admins can assign role with read/write/full-control privileges depending on the conditions required. Find a detailed view on the access provided for read, write and full control users in the below grid.

✗te: Scope based technician includes Remote Office and Custom Group technician. 

 

Threats & Patches 

Features

Scope

Read

Write

Full-control

 

Patch approval settings

All Computers

✔ (view only)

✔ (view only)

Scope based Technicians

✔ (view only)

✔ (view only)

✔ (view only)

 

Create Custom Group

All Computers

Only Computer (Static, Dynamic)

Only Computer (Static, Dynamic)

Scope based Technicians

✗                      

Only Computer (Static, Dynamic)

Only Comuter (Static, Dynamic)

 

 

Manual deployment

 

All Computers

✔ (view only)

Scope based Technicians

✔ (view only)

 

 

Test group configuration

 

All Computers

✔ (view only)

✔ 

✔ 

Scope based Technicians

✔ (view only)

 

 

Automated patch deployment

 

All Computers

✔ (view only)

Scope based Technicians

✔ (view only)

 

 

Deployment policy

 

All Computers

✔ (view only)

Scope based Technicians

✔ (view only)

 

System health policy

 

All Computers

✔ (view only)

✔ 

✔ 

Scope based Technicians

✔ (view only)

 

 

Decline patch

 

All Computers

✔ (view only)

✔ 

✔ 

Scope based Technicians

✔ (view only)

✔ (view only)

✔ (view only)

 

 

Schedule shutdown/restart task

 

 

All Computers

✔ (view only)

 

Scope based Technicians

 

 

Patch predefined reports

 

All Computers

✔ (view only)

Scope based Technicians

✔ (view only)

 

 

Schedule reports

 

All Computers

✔ (view only)

Scope based Technicians

✔ (view only)

 

 

Query reports

 

All Computers

✔ (view only)

✔ 

✔ 

Scope based Technicians

 

 

Patch scan

 

All Computers

Scope based Technicians

 

Restart from resource icon

All Computers

Scope based Technicians

 

Shutdown from resource icon

All Computers

Scope based Technicians

 

 

Patch database settings

All Computers

✔ 

Scope based Technicians

 

Fix system misconfigurations

All Computers

Scope based Technicians

 

Uninstall High Risk software

All Computers

Scope based Technicians

 

 

Add Exceptions

All Computers

✔ (view only)

✔ (view only)

Scope based Technicians

✔ (view only)

✔ (view only)

✔ (view only)

 

 

CIS policy audit

All Computers

✔ (view only)

Scope based Technicians

✔ (view only)

 

Schedule Executive reports

All Computers

✔ (view only)

Scope based Technicians

✔ (view only)

 

Scope of Management 

Features

Scope

Read

Write

Full-control

 

Add/Remove Computers

All Computers

✔ 

Scope based Technicians

✔ (remove option only)

 

Create Custom Group

All Computers

Only Computer (Static, Dynamic)

Only Computer (Static, Dynamic)

Scope based Technicians

✗                      

Only Computer (Static, Dynamic)

Only Comuter (Static, Dynamic)

 

Modify User details

All Computers

✔ 

Scope based Technicians

✔ 

 

Install/Uninstall Agent

All Computers

Scope based Technicians

 

Remote Offices

All Computers

Scope based Technicians

 

IP Scope

All Computers

✔ (view only)

✔ (view only)

✔ (view only)

Scope based Technicians

✔ (view only)

✔ (view only)

✔ (view only)

 

SoM Policy

All Computers

Scope based Technicians

 

Agent Settings

All Computers

Scope based Technicians

 

Configurations 

Features

Scope

Read

Write

Full-Control

 

Create Configurations (User/Computer)

All Computers

Scope based Technicians

 

Create Custom Group

All Computers

Only Computer (Static, Dynamic)

Only Computer (Static, Dynamic)

Scope based Technicians

✗                      

Only Computer (Static, Dynamic)

Only Comuter (Static, Dynamic)

 

Configuration Templates

All Computers

Scope based Technicians

 

Deploying Collections (User/Computer)

All Computers

Scope based Technicians

 

Install/Uninstall Software

All Computers

Scope based Technicians

 

Install/Uninstall Patch

All Computers

Scope based Technicians

 

View Configurations

All Computers

✔ (View only)

✔ (View only)

✔ (View only)

Scope based Technicians

✔ (View only)

✔ (View only)

✔ (View only)

 

Edit Configuration

All Computers

Scope based Technicians

 

Delete Configuration

All Computers

Scope based Technicians

Save as New in Configuration

All Computers

Scope based Technicians

Power Management Configuration

All Computers

Scope based Technicians

 

Software Deployment 

Features

Scope

Read

Write

Full-Control

 

Create Software Package

All Computers

Scope based Technicians

 

Create Custom Group

All Computers

Only Computer (Static, Dynamic)

Only Computer (Static, Dynamic)

Scope based Technicians

Only Computer (Static, Dynamic)

Only Computer (Static, Dynamic)

 

Install/Uninstall Software (User/Computer)

All Computers

Scope based Technicians

 

Create Package from Templates

All Computers

Scope based Technicians

 

View Configuration

All Computers

✔ (view only)

✔ (view only)

✔ (view only)

Scope based Technicians

✔ (view only)

✔ (view only)

✔ (view only)

 

Templates

All Computers

Scope based Technicians

 

Software Repository Settings

All Computers

Scope based Technicians

 

Sync Application details

All Computers

Scope based Technicians

 

Self Service Portal

All Computers

✔ (view only)

✔ (view only)

✔ (view only)

Scope based Technicians

✔ (view only)

✔ (view only)

✔ (view only)

 

Self Service Portal Settings

All Computers

Scope based Technicians

✔ (View only)

Save as New from Packages  All Computers  ✔ 
Scope based Technicians
 

 
✔ 
 

 

Inventory 

Features

Scope

Read

Write

Full-Control

 

Computers view (Bulk update/ Import CSV)

All Computers

✔(View only)

✔(Bulk Update only)

Scope based Technicians

✔(View only)

✔(Bulk Update only)

 

Create Custom Group

All Computers

Only Computer (Static, Dynamic)

Only Computer (Static, Dynamic)

Scope based Technicians

Only Computer (Static, Dynamic)

Only Computer (Static, Dynamic)

 

Add/Modify Computer details

All Computers

Scope based Technicians

 

Hardware view

All Computers

✔ (View only)

✔ (View only)

✔ (View only)

Scope based Technicians

✔ (View only)

✔ (View only)

✔ (View only)

 

Software view

All Computers

✔ (View only)

✔ (View only)

✔ (View only)

Scope based Technicians

✔ (View only)

✔ (View only)

✔ (View only)

 

Move Software

All Computers

Scope based Technicians

 

Alert Settings

All Computers

✔ (View only)

✔ (View only)

✔ (View only)

Scope based Technicians

✔ (View only)

 

Inventory Reports

All Computers

✔ (View only)

✔ (View only)

✔ (View only)

Scope based Technicians

✔ (View only)

✔ (View only)

✔ (View only)

 

Inventory Scan

All Computers

Scope based Technicians

Software Metering

All Computers

✔ (View only)

✔ (View only)

Scope based Technicians

✔ (View only)

✔ (View only)

 

Manage License

All Computers

✔ (View only)

Scope based Technicians

✔ (View only)

 

Software Grouping

All Computers

✔ (View only)

✔ (View only)

Scope based Technicians

✔ (View only)

✔ (View only)

 

Prohibit Software

All Computers

✔ (View only)

✔ (View only)

Scope based Technicians

✔ (View only)

✔ (View only)

 

Block exe

All Computers

✔ (View only)

✔ (View only)

Scope based Technicians

✔ (View only)

✔ (View only)

 

File Scan rules

All Computers

✔ (View only)

✔ (View only)

Scope based Technicians

✔ (View only)

✔ (View only)

 

Add Global Exclusions

All Computers

Scope based Technicians

 

Manage Software Category

All Computers

✔ (View only)

✔ (View only)

Scope based Technicians

✔ (View only)

✔ (View only)

 

Configure Alerts

All Computers

Scope based Technicians

 

Schedule Inventory Scan

All Computers

Scope based Technicians

 

Reports 

Features

Scope

Read

Write

Full-Control

 

Schedule Reports

All Computers

✔(view only)

Scope based Technicians

✔(view only)

 

Create Custom Group

All Computers

Only Computer (Static, Dynamic)

Only Computer (Static, Dynamic)

Scope based Technicians

Only Computer (Static, Dynamic)

Only Computer (Static, Dynamic)

 

Custom Reports

All Computers

Scope based Technicians

 

Active Directory Reports

All Computers

✔(view only)

Scope based Technicians

✔(view only)

 

Module based Reports

All Computers

✔(view only)

✔(view only)

Scope based Technicians

✔(view only)

✔ (view only)

 

Remote Control

Features

Scope

Administrator

Tools-Read

Tools-Write

Tools-Full

RDS-Read

RDS-Write

RDS-Full

 

Computers

All Computers

✔ (view only)

Scope based Technicians

 

 

Create Custom Group

All Computers

Only Computer (Static, Dynamic)

Only Computer (Static, Dynamic) 

Only Computer (Static, Dynamic)

Only Computer (Static, Dynamic)

Scope based Technicians

 

Only Computer (Static, Dynamic)

Only Computer (Static, Dynamic)

Only Computer (Static, Dynamic)

Only Computer

(Static, Dynamic)

 

Screen Recording

All Computers

Scope based Technicians

 

 

Performance

All Computers

Scope based Technicians

 

 

History

All Computers

✔(view only)

Scope based Technicians

 

✔ (view only)

 

User confirmation

All Computers

Scope based Technicians

 

 

 

User confirmation- Exclude computers

 

All Computers

Scope based Technicians

Chat

Features

Scope

Administrator

Tools-Read

Tools-Write

Tools-Full

RDS-Read

RDS-Write

RDS-Full

 

Users

All Computers

Scope based Technicians

 

 

History

All Computers

 

Scope based Technicians

 

 

History-Settings

All Computers

Scope based Technicians

 

System Manager

Features

Scope

Administrator

Tools-Read

Tools-Write

Tools-Full

RDS-Read

RDS-Write

RDS-Full

 

Export History

All Computers

Scope based Technicians

 

 

Export Settings

All Computers

Scope based Technicians

 

 

Task Manager

All Computers

✔(view only)

Scope based Technicians

 

✔(view only)

 

Services

All Computers

✔(view only)

Scope based Technicians

 

✔(view only)

 

Computer Rename

All Computers

Scope based Technicians

 

 

Terminal

All Computers

Scope based Technicians

 

 

Registry

All Computers

Scope based Technicians

 

 

File Manager

All Computers

Scope based Technicians

 

 

Event Viewer

All Computers

✔(view only)

✔(view only)

✔(view only)

✔(view only)

Scope based Technicians

 

✔(view only)

✔(view only)

✔(view only)

 

Device Manager

All Computers

✔(view only)

✔(view only)

Scope based Technicians

 

✔(view only)

✔(view only)

 

Shares

All Computers

✔(view only)

Scope based Technicians

 

✔(view only)

 

Printers

All Computers

✔(view only)

Scope based Technicians

 

✔(view only)

 

Groups

All Computers

✔(view only)

Scope based Technicians

 

✔(view only)

 

Softwares

All Computers

✔(view only)

Scope based Technicians

 

✔(view only)

 

Users

All Computers

✔(view only)

✔(view only)

✔(view only)

✔(view only)

Scope based Technicians

 

✔(view only)

✔(view only)

✔(view only)

 

Task Scheduler

All Computers

✔(view only)

Scope based Technicians

 

✔(view only)

 

Hardware

All Computers

✔(view only)

✔(view only)

✔(view only)

✔(view only)

Scope based Technicians

 

✔(view only)

✔(view only)

✔(view only)

Remote Shutdown

Features

Scope

Administrator

Tools-Read

Tools-Write

Tools-Full

RDS-Read

RDS-Write

RDS-Full

 

Shutdown ✗w

All Computers

✔(view only)

Scope based Technicians

 

✔(view only)

 

Scheduled Shutdown

All Computers

✔(view only)

Scope based Technicians

 

✔(view only)

Wake on LAN

Features

Scope

Administrator

Tools-Read

Tools-Write

Tools-Full

RDS-Read

RDS-Write

RDS-Full

 

Wake up ✗w

All Computers

✔(view only)

Scope based Technicians

 

✔(view only)

 

Settings

All Computers

Scope based Technicians

 

 

Scheduled Wake on LAN

All Computers

✔(view only)

Scope based Technicians

 

✔(view only)

System Tools

Features

Scope

Administrator

Tools-Read

Tools-Write

Tools-Full

RDS-Read

RDS-Write

RDS-Full

 

Task View

All Computers

✔(view only)

Scope based Technicians

 

✔(view only)

 

Settings

All Computers

Scope based Technicians

 

Tools Homepage

Features

Scope

Administrator

Tools-Read

Tools-Write

Tools-Full

RDS-Read

RDS-Write

RDS-Full

 

Homepage

All Computers

Scope based Technicians

 

 

Action Log Viewer

All Computers

✔(view only)

✔(view only)

✔(view only)

✔(view only)

✔(view only)

✔(view only)

✔(view only)

Scope based Technicians

 

✔(view only)

✔(view only)

✔(view only)

✔(view only)

✔(view only)

✔(view only)

Tools Settings

Features

Scope

Administrator

Tools-Read

Tools-Write

Tools-Full

RDS-Read

RDS-Write

RDS-Full

 

Port Settings

All Computers

Scope based Technicians

 

 

System Manager Settings

All Computers

Scope based Technicians

 

An✗uncement

Features

Scope

Administrator

Tools-Read

Tools-Write

Tools-Full

RDS-Read

RDS-Write

RDS-Full

 

Task View

All Computers

Scope based Technicians

 

✔(view only)

 

 OS Deployment 

Features

Scope

Read

Full-Control

✗ Access

 

Imaging

All Computers

✔(view only)

Scope based Technicians

N/A

N/A

N/A

 

Deployment template

All Computers

✔(view only)

Scope based Technicians

N/A

N/A

N/A

 

Deployment task

All Computers

✔(view only)

Scope based Technicians

N/A

N/A

N/A

 

Instant task

All Computers

✔(view only)

Scope based Technicians

N/A

N/A

N/A

Standalone Task 
All Computers 
 
 ✔(view only)  ✔  ✗

Scope based Technicians
 
 N/A  N/A  N/A
Media 
All Computers 
 
 ✔(view only)  ✔  ✗

Scope based Technicians

 
 N/A  N/A  N/A
USMT 
All Computers 
 
 ✔(view only)  ✔  ✗

Scope based Technicians
 
 N/A  N/A  N/A
Deployment 
All Computers
 
 ✔(view only)  ✔  ✗

Scope Based Technicians
 
 N/A  N/A  N/A
Post Deployment 
All Computers 
 
 ✔(view only)  ✔  ✗

Scope Based Technicians
 
 N/A  N/A  N/A
Remote Office
All Computers
 
 ✔(view only)  ✔  ✗

Scope Based Technicians
 
 N/A  N/A  N/A

 

Application Control 

Features

Scope

Read

Write

Full-Control

 

Create App Group

All Computers

Scope based Technicians

Modify App Group

All Computers

Scope based Technicians

Delete App Group

All Computers

Scope based Technicians

 

View App Group

All Computers

✔(view only)

✔ (view only)

Scope based Technicians

(view only)

 

Create Custom Group

All Computers

Scope based Technicians

 

Associate Policy

All Computers

Scope based Technicians

 

Modify Associated Policy

All Computers

Scope based Technicians

 

Delete Associated Policy

All Computers

Scope based Technicians

 

View Associated Policy

All Computers

✔(view only)

✔(view only)

Scope based Technicians

✔(view only)

 

Create Temporary Access

All Computers

Scope based Technicians

 

Modify Temporary Access

All Computers

Scope based Technicians

 

Delete Temporary Access

All Computers

Scope based Technicians

 

View Temporary Access

All Computers

✔(view only)

✔(view only)

Scope based Technicians

✔(view only)

✔(view only)

 

Create Privilege Group

All Computers

 

Scope based Technicians

 

 

Modify Privilege Group

 

All Computers

 

 

 

Scope based Technicians

 

View Privilege Group

All Computers

✔(view only)

✔ (view only)

Scope based Technicians

✔(view only)

✔ (view only)

Save Manage Exclusion Policy

All Computers

Scope based Technicians

View Manage Exclusion Policy

All Computers

✔(view only)

✔ (view only)

Scope based Technicians

✔(view only)

✔ (view only)

 

Remove Local admin

All Computers

Scope based Technicians

 

View Local admin

All Computers

✔(view only)

✔ (view only)

Scope based Technicians

✔(view only)

✔ (view only)

 

Device Control 

Features

Scope

Read

Write

Full-Control

 

Create/duplicate policy

All Computers

Scope based Technicians

Publish policy

All Computers

Scope based Technicians

 

Modify policy

All Computers

Scope based Technicians

 

View policy

All Computers

✔(view only)

✔(view only)

Scope based Technicians

✔(view only)

✔(view only)

Decline/Trash/Restore/

Delete policy

All Computers

Scope based Technicians

 

Create Custom Group

All Computers

Scope based Technicians

 

Deploy Policy

All Computers

Scope based Technicians

 

Modify deploy Policy

All Computers

Scope based Technicians

 

View deploy Policy

All Computers

Scope based Technicians

Create/duplicate Trusted Device

All Computers

Scope based Technicians

Publish Trusted Device

All Computers

Scope based Technicians

 

Modify/Restore/Delete Trusted Device

All Computers

Scope based Technicians

 

View Trusted Device

All Computers

✔(View only)

✔(View only)

Scope based Technicians

✔(View only)

✔ (View only)

 

Create Temporary Access

All Computers

Scope based Technicians

 

Publish Temporary Access

All Computers

Scope based Technicians

 

Modify Temporary Access

All Computers

Scope based Technicians

 

View Temporary Access

All Computers

Scope based Technicians

Decline/Revoke/Delete Temporary Access

All Computers

Scope based Technicians

 

Save Audit settings

All Computers

Scope based Technicians

 

Extension grouping

All Computers

Scope based Technicians

 

Bitlocker Management 

Features

Scope

Read

Write

Full-Control

Create/duplicate policy

All Computers

Scope based Technicians

 

Publish policy

All Computers

Scope based Technicians

 

Modify policy

All Computers

Scope based Technicians

Decline/Delete/Restore policy

All Computers

Scope based Technicians

 

Create Custom Group

All Computers

Scope based Technicians

 

Deploy Policy

All Computers

Scope based Technicians

 

Modify deploy Policy

All Computers

Scope based Technicians

 

View deployment Policy

All Computers

Scope based Technicians

 

List Recovery Key

All Computers

Scope based Technicians

 

On-demand action

All Computers

Scope based Technicians

 

 

.....