Roles & Permissions in OS Deployer | Role Difference Guide
Endpoint Central supports pre-defined and user-defined roles to manage their IT infrastructure. Users can customize roles according to their organization's policies and associate with a scope of devices to be managed. Admins can assign role with read/write/full-control privileges depending on the conditions required. Find a detailed view on the access provided for read, write and full control users in the below grid.
Features | Scope | Read | Write | Full-control |
Patch approval settings | All Computers | ✔ (view only) | ✔ (view only) | ✔ |
Scope based Technicians | ✔ (view only) | ✔ (view only) | ✔ (view only) | |
Create Custom Group | All Computers | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) |
Scope based Technicians | ✗ | Only Computer (Static, Dynamic) | Only Comuter (Static, Dynamic) | |
Manual deployment |
All Computers | ✔ (view only) | ✔ | ✔ |
Scope based Technicians | ✔ (view only) | ✔ | ✔ | |
Test group configuration |
All Computers | ✔ (view only) | ✔ | ✔ |
Scope based Technicians | ✔ (view only) | ✗ | ✗ | |
Automated patch deployment |
All Computers | ✔ (view only) | ✔ | ✔ |
Scope based Technicians | ✔ (view only) | ✔ | ✔ | |
Deployment policy |
All Computers | ✔ (view only) | ✔ | ✔ |
Scope based Technicians | ✔ (view only) | ✔ | ✔ | |
System health policy |
All Computers | ✔ (view only) | ✔ | ✔ |
Scope based Technicians | ✔ (view only) | ✗ | ✗ | |
Decline patch |
All Computers | ✔ (view only) | ✔ | ✔ |
Scope based Technicians | ✔ (view only) | ✔ (view only) | ✔ (view only) | |
Schedule shutdown/restart task |
All Computers | ✔ (view only)
| ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Patch predefined reports |
All Computers | ✔ (view only) | ✔ | ✔ |
Scope based Technicians | ✔ (view only) | ✔ | ✔ | |
Schedule reports |
All Computers | ✔ (view only) | ✔ | ✔ |
Scope based Technicians | ✔ (view only) | ✔ | ✔ | |
Patch scan |
All Computers | ✔ | ✔ | ✔ |
Scope based Technicians | ✔ | ✔ | ✔ | |
Restart from resource icon | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Shutdown from resource icon | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Patch database settings | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✗ | |
Fix system misconfigurations | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✔ | ✔ | ✔ | |
Uninstall High Risk software | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✔ | ✔ | ✔ | |
Add Exceptions | All Computers | ✔ (view only) | ✔ (view only) | ✔ |
Scope based Technicians | ✔ (view only) | ✔ (view only) | ✔ (view only) | |
CIS policy audit | All Computers | ✔ (view only) | ✔ | ✔ |
Scope based Technicians | ✔ (view only) | ✔ | ✔ | |
Schedule Executive reports | All Computers | ✔ (view only) | ✔ | ✔ |
Scope based Technicians | ✔ (view only) | ✔ | ✔ |
Features | Scope | Read | Write | Full-control |
Add/Remove Computers | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ (remove option only) | |
Create Custom Group | All Computers | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) |
Scope based Technicians | ✗ | Only Computer (Static, Dynamic) | Only Comuter (Static, Dynamic) | |
Modify User details | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Install/Uninstall Agent | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Remote Offices | All Computers | ✔ | ✗ | ✔ |
Scope based Technicians | ✔ | ✗ | ✔ | |
IP Scope | All Computers | ✔ (view only) | ✔ (view only) | ✔ (view only) |
Scope based Technicians | ✔ (view only) | ✔ (view only) | ✔ (view only) | |
SoM Policy | All Computers | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✗ | ✗ | |
Agent Settings | All Computers | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✗ | ✗ |
Features | Scope | Read | Write | Full-Control |
Create Configurations (User/Computer) | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Create Custom Group | All Computers | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) |
Scope based Technicians | ✗ | Only Computer (Static, Dynamic) | Only Comuter (Static, Dynamic) | |
Configuration Templates | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Deploying Collections (User/Computer) | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Install/Uninstall Software | All Computers | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✗ | ✗ | |
Install/Uninstall Patch | All Computers | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✗ | ✗ | |
View Configurations | All Computers | ✔ (View only) | ✔ (View only) | ✔ (View only) |
Scope based Technicians | ✔ (View only) | ✔ (View only) | ✔ (View only) | |
Edit Configuration | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Delete Configuration | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Save as New in Configuration | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Power Management Configuration | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ |
Features | Scope | Read | Write | Full-Control |
Create Software Package | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Create Custom Group | All Computers | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) |
Scope based Technicians | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) | |
Install/Uninstall Software (User/Computer) | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Create Package from Templates | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
View Sensitive Data in Created Package | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
View Configuration | All Computers | ✔ (view only) | ✔ (view only) | ✔ (view only) |
Scope based Technicians | ✔ (view only) | ✔ (view only) | ✔ (view only) | |
Templates | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Software Repository Settings | All Computers | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✗ | ✗ | |
Sync Application details | All Computers | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✗ | ✗ | |
Self Service Portal | All Computers | ✔ (view only) | ✔ (view only) | ✔ (view only) |
Scope based Technicians | ✔ (view only) | ✔ (view only) | ✔ (view only) | |
Self Service Portal Settings | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ (View only) | |
| Save as New from Packages | All Computers | ✗ | ✗ | ✔ |
| Scope based Technicians | ✗ | ✗ | ✔ |
Features | Scope | Read | Write | Full-Control |
Computers view (Bulk update/ Import CSV) | All Computers | ✔(View only) | ✔(Bulk Update only) | ✔ |
Scope based Technicians | ✔(View only) | ✔(Bulk Update only) | ✔ | |
Create Custom Group | All Computers | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) |
Scope based Technicians | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) | |
Add/Modify Computer details | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Hardware view | All Computers | ✔ (View only) | ✔ (View only) | ✔ (View only) |
Scope based Technicians | ✔ (View only) | ✔ (View only) | ✔ (View only) | |
Software view | All Computers | ✔ (View only) | ✔ (View only) | ✔ (View only) |
Scope based Technicians | ✔ (View only) | ✔ (View only) | ✔ (View only) | |
Move Software | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✗ | |
Alert Settings | All Computers | ✔ (View only) | ✔ (View only) | ✔ (View only) |
Scope based Technicians | ✗ | ✗ | ✔ (View only) | |
Inventory Reports | All Computers | ✔ (View only) | ✔ (View only) | ✔ (View only) |
Scope based Technicians | ✔ (View only) | ✔ (View only) | ✔ (View only) | |
Inventory Scan | All Computers | ✔ | ✔ | ✔ |
Scope based Technicians | ✔ | ✔ | ✔ | |
Software Metering | All Computers | ✔ (View only) | ✔ (View only) | ✔ |
Scope based Technicians | ✔ (View only) | ✔ (View only) | ✔ | |
Manage License | All Computers | ✔ (View only) | ✔ | ✔ |
Scope based Technicians | ✔ (View only) | ✔ | ✔ | |
Software Grouping | All Computers | ✔ (View only) | ✔ (View only) | ✔ |
Scope based Technicians | ✔ (View only) | ✔ (View only) | ✔ | |
Prohibit Software | All Computers | ✔ (View only) | ✔ (View only) | ✔ |
Scope based Technicians | ✔ (View only) | ✔ (View only) | ✔ | |
Block exe | All Computers | ✔ (View only) | ✔ (View only) | ✔ |
Scope based Technicians | ✔ (View only) | ✔ (View only) | ✔ (View only) | |
File Scan rules | All Computers | ✔ (View only) | ✔ (View only) | ✔ |
Scope based Technicians | ✔ (View only) | ✔ (View only) | ✔ | |
Add Global Exclusions | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Manage Software Category | All Computers | ✔ (View only) | ✔ (View only) | ✔ |
Scope based Technicians | ✔ (View only) | ✔ (View only) | ✔ | |
Configure Alerts | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Schedule Inventory Scan | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ |
Features | Scope | Read | Write | Full-Control |
Schedule Reports | All Computers | ✔(view only) | ✔ | ✔ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | |
Create Custom Group | All Computers | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) |
Scope based Technicians | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) | |
Custom Reports | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Active Directory Reports | All Computers | ✔(view only) | ✔ | ✔ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | |
Module based Reports | All Computers | ✔(view only) | ✔(view only) | ✔ |
Scope based Technicians | ✔(view only) | ✔ (view only) | ✔ |
Features | Scope | Administrator | Tools-Read | Tools-Write | Tools-Full | RDS-Read | RDS-Write | RDS-Full |
Computers | All Computers | ✔ | ✗ | ✗ | ✗ | ✔ (view only) | ✔ | ✔ |
Scope based Technicians | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ||
Create Custom Group | All Computers | ✔ | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) |
Scope based Technicians | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) | ✗ | Only Computer (Static, Dynamic) | Only Computer (Static, Dynamic) | ||
Screen Recording | All Computers | ✔ | ✗ | ✗ | ✗ | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ||
Performance | All Computers | ✔ | ✗ | ✗ | ✗ | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ||
History | All Computers | ✔ | ✗ | ✗ | ✗ | ✔(view only) | ✔ | ✔ |
Scope based Technicians | ✗ | ✗ | ✗ | ✔ (view only) | ✔ | ✔ | ||
User confirmation | All Computers | ✔ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ||
User confirmation- Exclude computers |
All Computers | ✔ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Features | Scope | Administrator | Tools-Read | Tools-Write | Tools-Full | RDS-Read | RDS-Write | RDS-Full |
Users | All Computers | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ |
Scope based Technicians | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ||
History | All Computers | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
Scope based Technicians | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ||
History-Settings | All Computers | ✔ | ✗ | ✔ | ✔ | ✗ | ✔ | ✔ |
Scope based Technicians | ✔ | ✗ | ✗ | ✗ | ✗ | ✗ |
Features | Scope | Administrator | Tools-Read | Tools-Write | Tools-Full | RDS-Read | RDS-Write | RDS-Full |
Export History | All Computers | ✔ | ✗ | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✔ | ✔ | ✗ | ✗ | ✗ | ||
Export Settings | All Computers | ✔ | ✗ | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ||
Task Manager | All Computers | ✔ | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ | ||
Services | All Computers | ✔ | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ | ||
Computer Rename | All Computers | ✔ | ✗ | ✔ | ✗ | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✔ | ✗ | ✗ | ✗ | ✗ | ||
Terminal | All Computers | ✔ | ✗ | ✔ | ✗ | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✔ | ✗ | ✗ | ✗ | ✗ | ||
Registry | All Computers | ✔ | ✗ | ✔ | ✗ | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✔ | ✗ | ✗ | ✗ | ✗ | ||
File Manager | All Computers | ✔ | ✗ | ✔ | ✗ | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✔ | ✗ | ✗ | ✗ | ✗ | ||
Event Viewer | All Computers | ✔(view only) | ✔(view only) | ✔(view only) | ✔(view only) | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔(view only) | ✔(view only) | ✗ | ✗ | ✗ | ||
Device Manager | All Computers | ✔ | ✔(view only) | ✔(view only) | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔(view only) | ✔ | ✗ | ✗ | ✗ | ||
Shares | All Computers | ✔ | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ | ||
Printers | All Computers | ✔ | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ | ||
Groups | All Computers | ✔ | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ | ||
Softwares | All Computers | ✔ | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ | ||
Users | All Computers | ✔(view only) | ✔(view only) | ✔(view only) | ✔(view only) | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔(view only) | ✔(view only) | ✗ | ✗ | ✗ | ||
Task Scheduler | All Computers | ✔ | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ | ||
Hardware | All Computers | ✔(view only) | ✔(view only) | ✔(view only) | ✔(view only) | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔(view only) | ✔(view only) | ✗ | ✗ | ✗ |
Features | Scope | Administrator | Tools-Read | Tools-Write | Tools-Full | RDS-Read | RDS-Write | RDS-Full |
Shutdown ✗w | All Computers | ✔ | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ | ||
Scheduled Shutdown | All Computers | ✔ | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ |
Features | Scope | Administrator | Tools-Read | Tools-Write | Tools-Full | RDS-Read | RDS-Write | RDS-Full |
Wake up ✗w | All Computers | ✔ | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ | ||
Settings | All Computers | ✔ | ✗ | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ||
Scheduled Wake on LAN | All Computers | ✔ | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ |
Features | Scope | Administrator | Tools-Read | Tools-Write | Tools-Full | RDS-Read | RDS-Write | RDS-Full |
Task View | All Computers | ✔ | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ | ||
Settings | All Computers | ✔ | ✗ | ✗ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Features | Scope | Administrator | Tools-Read | Tools-Write | Tools-Full | RDS-Read | RDS-Write | RDS-Full |
Homepage | All Computers | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ |
Scope based Technicians | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ||
Action Log Viewer | All Computers | ✔(view only) | ✔(view only) | ✔(view only) | ✔(view only) | ✔(view only) | ✔(view only) | ✔(view only) |
Scope based Technicians | ✔(view only) | ✔(view only) | ✔(view only) | ✔(view only) | ✔(view only) | ✔(view only) |
Features | Scope | Administrator | Tools-Read | Tools-Write | Tools-Full | RDS-Read | RDS-Write | RDS-Full |
Port Settings | All Computers | ✔ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ||
System Manager Settings | All Computers | ✔ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Scope based Technicians | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Features | Scope | Administrator | Tools-Read | Tools-Write | Tools-Full | RDS-Read | RDS-Write | RDS-Full |
Task View | All Computers | ✔ | ✔ | ✔ | ✔ | ✗ | ✗ | ✗ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | ✗ | ✗ | ✗ |
Features | Scope | Read | Full-Control | ✗ Access |
Imaging | All Computers | ✔(view only) | ✔ | ✗ |
Scope based Technicians | N/A | N/A | N/A | |
Deployment template | All Computers | ✔(view only) | ✔ | ✗ |
Scope based Technicians | N/A | N/A | N/A | |
Deployment task | All Computers | ✔(view only) | ✔ | ✗ |
Scope based Technicians | N/A | N/A | N/A | |
Instant task | All Computers | ✔(view only) | ✔ | ✗ |
Scope based Technicians | N/A | N/A | N/A | |
| Standalone Task | All Computers | ✔(view only) | ✔ | ✗ |
Scope based Technicians | N/A | N/A | N/A | |
| Media | All Computers | ✔(view only) | ✔ | ✗ |
Scope based Technicians | N/A | N/A | N/A | |
| USMT | All Computers | ✔(view only) | ✔ | ✗ |
Scope based Technicians | N/A | N/A | N/A | |
| Deployment | All Computers | ✔(view only) | ✔ | ✗ |
Scope Based Technicians | N/A | N/A | N/A | |
| Post Deployment | All Computers | ✔(view only) | ✔ | ✗ |
Scope Based Technicians | N/A | N/A | N/A | |
| Remote Office | All Computers | ✔(view only) | ✔ | ✗ |
Scope Based Technicians | N/A | N/A | N/A |
Features | Scope | Read | Write | Full-Control |
Create App Group | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Modify App Group | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Delete App Group | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
View App Group | All Computers | ✔(view only) | ✔ (view only) | ✔ |
Scope based Technicians | (view only) | ✔ | ✔ | |
Create Custom Group | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Associate Policy | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Modify Associated Policy | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Delete Associated Policy | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
View Associated Policy | All Computers | ✔(view only) | ✔(view only) | ✔ |
Scope based Technicians | ✔(view only) | ✔ | ✔ | |
Create Temporary Access | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Modify Temporary Access | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Delete Temporary Access | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
View Temporary Access | All Computers | ✔(view only) | ✔(view only) | ✔ |
Scope based Technicians | ✔(view only) | ✔(view only) | ✔ | |
Create Privilege Group | All Computers
| ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Modify Privilege Group |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
View Privilege Group | All Computers | ✔(view only) | ✔ (view only) | ✔ |
Scope based Technicians | ✔(view only) | ✔ (view only) | ✔ | |
Save Manage Exclusion Policy | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
View Manage Exclusion Policy | All Computers | ✔(view only) | ✔ (view only) | ✔ |
Scope based Technicians | ✔(view only) | ✔ (view only) | ✔ | |
Remove Local admin | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
View Local admin | All Computers | ✔(view only) | ✔ (view only) | ✔ |
Scope based Technicians | ✔(view only) | ✔ (view only) | ✔ |
Features | Scope | Read | Write | Full-Control |
Create/duplicate policy | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Publish policy | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✗ | |
Modify policy | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
View policy | All Computers | ✔(view only) | ✔(view only) | ✔ |
Scope based Technicians | ✔(view only) | ✔(view only) | ✔ | |
Decline/Trash/Restore/ Delete policy | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Create Custom Group | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Deploy Policy | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Modify deploy Policy | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
View deploy Policy | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Create/duplicate Trusted Device | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Publish Trusted Device | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Modify/Restore/Delete Trusted Device | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
View Trusted Device | All Computers | ✔(View only) | ✔(View only) | ✔ |
Scope based Technicians | ✔(View only) | ✔ (View only) | ✔ | |
Create Temporary Access | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Publish Temporary Access | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Modify Temporary Access | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
View Temporary Access | All Computers | ✔ | ✔ | ✔ |
Scope based Technicians | ✔ | ✔ | ✔ | |
Decline/Revoke/Delete Temporary Access | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Save Audit settings | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Extension grouping | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ |
Features | Scope | Read | Write | Full-Control |
Create/duplicate policy | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Publish policy | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Modify policy | All Computers | ✗ | ✔ | ✔ |
Scope based Technicians | ✗ | ✔ | ✔ | |
Decline/Delete/Restore policy | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Create Custom Group | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Deploy Policy | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
Modify deploy Policy | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
View deployment Policy | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
List Recovery Key | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ | |
On-demand action | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ | ✗ | ✔ |
Yes No