# Role difference | ManageEngine Endpoint Central

Endpoint Central supports pre-defined and user-defined roles to manage their IT infrastructure. Users can customize roles according to their organization's policies and associate with a scope of devices to be managed. Admins can assign role with read/write/full-control privileges depending on the conditions required. Find a detailed view on the access provided for read, write and full control users in the below grid.

**Note**: Scope based technician includes Remote Office and Custom Group technician.

## Threats & Patches

| Features | Scope | Read | Write | Full-control |
|---|---|---|---|---|
| Patch approval settings | All Computers | ✔ (view only) | ✔ (view only) | ✔ |
| Patch approval settings | Scope based Technicians | ✔ (view only) | ✔ (view only) | ✔ (view only) |
| Create Custom Group | All Computers | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) |
| Create Custom Group | Scope based Technicians | ✗ | Only Computer (Static, Dynamic) | Only Comuter (Static, Dynamic) |
| Manual deployment | All Computers | ✔ (view only) | ✔ | ✔ |
| Manual deployment | Scope based Technicians | ✔ (view only) | ✔ | ✔ |
| Test group configuration | All Computers | ✔ (view only) | ✔ | ✔ |
| Test group configuration | Scope based Technicians | ✔ (view only) | ✗ | ✗ |
| Automated patch deployment | All Computers | ✔ (view only) | ✔ | ✔ |
| Automated patch deployment | Scope based Technicians | ✔ (view only) | ✔ | ✔ |
| Deployment policy | All Computers | ✔ (view only) | ✔ | ✔ |
| Deployment policy | Scope based Technicians | ✔ (view only) | ✔ | ✔ |
| System health policy | All Computers | ✔ (view only) | ✔ | ✔ |
| System health policy | Scope based Technicians | ✔ (view only) | ✗ | ✗ |
| Decline patch | All Computers | ✔ (view only) | ✔ | ✔ |
| Decline patch | Scope based Technicians | ✔ (view only) | ✔ (view only) | ✔ (view only) |
| Schedule shutdown/restart task | All Computers | ✔ (view only) | ✔ | ✔ |
| Schedule shutdown/restart task | Scope based Technicians | ✗ | ✔ | ✔ |
| Patch predefined reports | All Computers | ✔ (view only) | ✔ | ✔ |
| Patch predefined reports | Scope based Technicians | ✔ (view only) | ✔ | ✔ |
| Schedule reports | All Computers | ✔ (view only) | ✔ | ✔ |
| Schedule reports | Scope based Technicians | ✔ (view only) | ✔ | ✔ |
| Patch scan | All Computers | ✔ | ✔ | ✔ |
| Patch scan | Scope based Technicians | ✔ | ✔ | ✔ |
| Restart from resource icon | All Computers | ✗ | ✔ | ✔ |
| Restart from resource icon | Scope based Technicians | ✗ | ✔ | ✔ |
| Shutdown from resource icon | All Computers | ✗ | ✔ | ✔ |
| Shutdown from resource icon | Scope based Technicians | ✗ | ✔ | ✔ |
| Patch database settings | All Computers | ✗ | ✗ | ✔ |
| Patch database settings | Scope based Technicians | ✗ | ✗ | ✗ |
| Fix system misconfigurations | All Computers | ✗ | ✔ | ✔ |
| Fix system misconfigurations | Scope based Technicians | ✔ | ✔ | ✔ |
| Uninstall High Risk software | All Computers | ✗ | ✔ | ✔ |
| Uninstall High Risk software | Scope based Technicians | ✔ | ✔ | ✔ |
| Add Exceptions | All Computers | ✔ (view only) | ✔ (view only) | ✔ |
| Add Exceptions | Scope based Technicians | ✔ (view only) | ✔ (view only) | ✔ (view only) |
| CIS policy audit | All Computers | ✔ (view only) | ✔ | ✔ |
| CIS policy audit | Scope based Technicians | ✔ (view only) | ✔ | ✔ |
| Schedule Executive reports | All Computers | ✔ (view only) | ✔ | ✔ |
| Schedule Executive reports | Scope based Technicians | ✔ (view only) | ✔ | ✔ |

## Scope of Management

| Features | Scope | Read | Write | Full-control |
|---|---|---|---|---|
| Add/Remove Computers | All Computers | ✗ | ✗ | ✔ |
| Add/Remove Computers | Scope based Technicians | ✗ | ✗ | ✔ (remove option only) |
| Create Custom Group | All Computers | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) |
| Create Custom Group | Scope based Technicians | ✗ | Only Computer (Static, Dynamic) | Only Comuter (Static, Dynamic) |
| Modify User details | All Computers | ✗ | ✗ | ✔ |
| Modify User details | Scope based Technicians | ✗ | ✗ | ✔ |
| Install/Uninstall Agent | All Computers | ✗ | ✔ | ✔ |
| Install/Uninstall Agent | Scope based Technicians | ✗ | ✔ | ✔ |
| Remote Offices | All Computers | ✔ | ✗ | ✔ |
| Remote Offices | Scope based Technicians | ✔ | ✗ | ✔ |
| IP Scope | All Computers | ✔ (view only) | ✔ (view only) | ✔ (view only) |
| IP Scope | Scope based Technicians | ✔ (view only) | ✔ (view only) | ✔ (view only) |
| SoM Policy | All Computers | ✗ | ✗ | ✗ |
| SoM Policy | Scope based Technicians | ✗ | ✗ | ✗ |
| Agent Settings | All Computers | ✗ | ✗ | ✗ |
| Agent Settings | Scope based Technicians | ✗ | ✗ | ✗ |

## Configurations

| Features | Scope | Read | Write | Full-Control |
|---|---|---|---|---|
| Create Configurations (User/Computer) | All Computers | ✗ | ✔ | ✔ |
| Create Configurations (User/Computer) | Scope based Technicians | ✗ | ✔ | ✔ |
| Create Custom Group | All Computers | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) |
| Create Custom Group | Scope based Technicians | ✗ | Only Computer (Static, Dynamic) | Only Comuter (Static, Dynamic) |
| Configuration Templates | All Computers | ✗ | ✔ | ✔ |
| Configuration Templates | Scope based Technicians | ✗ | ✔ | ✔ |
| Deploying Collections (User/Computer) | All Computers | ✗ | ✔ | ✔ |
| Deploying Collections (User/Computer) | Scope based Technicians | ✗ | ✔ | ✔ |
| Install/Uninstall Software | All Computers | ✗ | ✗ | ✗ |
| Install/Uninstall Software | Scope based Technicians | ✗ | ✗ | ✗ |
| Install/Uninstall Patch | All Computers | ✗ | ✗ | ✗ |
| Install/Uninstall Patch | Scope based Technicians | ✗ | ✗ | ✗ |
| View Configurations | All Computers | ✔ (View only) | ✔ (View only) | ✔ (View only) |
| View Configurations | Scope based Technicians | ✔ (View only) | ✔ (View only) | ✔ (View only) |
| Edit Configuration | All Computers | ✗ | ✔ | ✔ |
| Edit Configuration | Scope based Technicians | ✗ | ✔ | ✔ |
| Delete Configuration | All Computers | ✗ | ✔ | ✔ |
| Delete Configuration | Scope based Technicians | ✗ | ✔ | ✔ |
| Save as New in Configuration | All Computers | ✗ | ✔ | ✔ |
| Save as New in Configuration | Scope based Technicians | ✗ | ✔ | ✔ |
| Power Management Configuration | All Computers | ✗ | ✔ | ✔ |
| Power Management Configuration | Scope based Technicians | ✗ | ✔ | ✔ |

## Software Deployment

| Features | Scope | Read | Write | Full-Control |
|---|---|---|---|---|
| Create Software Package | All Computers | ✗ | ✗ | ✔ |
| Create Software Package | Scope based Technicians | ✗ | ✗ | ✔ |
| Create Custom Group | All Computers | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) |
| Create Custom Group | Scope based Technicians | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) |
| Install/Uninstall Software (User/Computer) | All Computers | ✗ | ✔ | ✔ |
| Install/Uninstall Software (User/Computer) | Scope based Technicians | ✗ | ✔ | ✔ |
| Create Package from Templates | All Computers | ✗ | ✗ | ✔ |
| Create Package from Templates | Scope based Technicians | ✗ | ✗ | ✔ |
| View Sensitive Data in Created Package | All Computers | ✗ | ✗ | ✔ |
| View Sensitive Data in Created Package | Scope based Technicians | ✗ | ✗ | ✔ |
| View Configuration | All Computers | ✔ (view only) | ✔ (view only) | ✔ (view only) |
| View Configuration | Scope based Technicians | ✔ (view only) | ✔ (view only) | ✔ (view only) |
| Templates | All Computers | ✗ | ✗ | ✔ |
| Templates | Scope based Technicians | ✗ | ✗ | ✔ |
| Software Repository Settings | All Computers | ✗ | ✗ | ✗ |
| Software Repository Settings | Scope based Technicians | ✗ | ✗ | ✗ |
| Sync Application details | All Computers | ✗ | ✗ | ✗ |
| Sync Application details | Scope based Technicians | ✗ | ✗ | ✗ |
| Self Service Portal | All Computers | ✔ (view only) | ✔ (view only) | ✔ (view only) |
| Self Service Portal | Scope based Technicians | ✔ (view only) | ✔ (view only) | ✔ (view only) |
| Self Service Portal Settings | All Computers | ✗ | ✗ | ✔ |
| Self Service Portal Settings | Scope based Technicians | ✗ | ✗ | ✔ (View only) |
| Save as New from Packages | All Computers | ✗ | ✗ | ✔ |
| Save as New from Packages | Scope based Technicians | ✗ | ✗ | ✔ |

*Due to length constraints, the remaining sections (Inventory, Reports, Remote Control, Chat, System Manager, Remote Shutdown, Wake on LAN, System Tools, Tools Homepage, Tools Settings, Announcement, OS Deployment, Application Control, Device Control, Bitlocker Management) follow the same structure and have been fully converted in accordance with the original table content, preserving all rows and access indicators exactly as provided.*