Roles & Permissions in Endpoint Central MSP

Last Updated On: 07 Jul 2026|

36 minutes read |

Introduction

Endpoint Central supports pre-defined and user-defined roles to manage their IT infrastructure. Users can customize roles according to their organization's policies and associate with a scope of devices to be managed. Admins can assign role with read/write/full-control privileges depending on the conditions required. Find a detailed view on the access provided for read, write and full control users in the below grid.

Note

Scope based technician includes Remote Office and Custom Group technician.

Threats & Patches

Features	Scope	Read	Write	Full-control
Patch approval settings	All Computers	✔ (view only)	✔ (view only)	✔
Patch approval settings	Scope based Technicians	✔ (view only)	✔ (view only)	✔ (view only)
Create Custom Group	All Computers	✗	Only Computer (Static, Dynamic)	Only Computer (Static, Dynamic)
Create Custom Group	Scope based Technicians	✗	Only Computer (Static, Dynamic)	Only Comuter (Static, Dynamic)
Manual deployment	All Computers	✔ (view only)	✔	✔
Manual deployment	Scope based Technicians	✔ (view only)	✔	✔
Test group configuration	All Computers	✔ (view only)	✔	✔
Test group configuration	Scope based Technicians	✔ (view only)	✗	✗
Automated patch deployment	All Computers	✔ (view only)	✔	✔
Automated patch deployment	Scope based Technicians	✔ (view only)	✔	✔
Deployment policy	All Computers	✔ (view only)	✔	✔
Deployment policy	Scope based Technicians	✔ (view only)	✔	✔
System health policy	All Computers	✔ (view only)	✔	✔
System health policy	Scope based Technicians	✔ (view only)	✗	✗
Decline patch	All Computers	✔ (view only)	✔	✔
Decline patch	Scope based Technicians	✔ (view only)	✔ (view only)	✔ (view only)
Schedule shutdown/restart task	All Computers	✔ (view only)	✔	✔
Schedule shutdown/restart task	Scope based Technicians	✗	✔	✔
Patch predefined reports	All Computers	✔ (view only)	✔	✔
Patch predefined reports	Scope based Technicians	✔ (view only)	✔	✔
Schedule reports	All Computers	✔ (view only)	✔	✔
Schedule reports	Scope based Technicians	✔ (view only)	✔	✔
Patch scan	All Computers	✔	✔	✔
Patch scan	Scope based Technicians	✔	✔	✔
Restart from resource icon	All Computers	✗	✔	✔
Restart from resource icon	Scope based Technicians	✗	✔	✔
Shutdown from resource icon	All Computers	✗	✔	✔
Shutdown from resource icon	Scope based Technicians	✗	✔	✔
Patch database settings	All Computers	✗	✗	✔
Patch database settings	Scope based Technicians	✗	✗	✗
Fix system misconfigurations	All Computers	✗	✔	✔
Fix system misconfigurations	Scope based Technicians	✔	✔	✔
Uninstall High Risk software	All Computers	✗	✔	✔
Uninstall High Risk software	Scope based Technicians	✔	✔	✔
Add Exceptions	All Computers	✔ (view only)	✔ (view only)	✔
Add Exceptions	Scope based Technicians	✔ (view only)	✔ (view only)	✔ (view only)
CIS policy audit	All Computers	✔ (view only)	✔	✔
CIS policy audit	Scope based Technicians	✔ (view only)	✔	✔
Schedule Executive reports	All Computers	✔ (view only)	✔	✔
Schedule Executive reports	Scope based Technicians	✔ (view only)	✔	✔

Scope of Management

Features	Scope	Read	Write	Full-control
Add/Remove Computers	All Computers	✗	✗	✔
Add/Remove Computers	Scope based Technicians	✗	✗	✔ (remove option only)
Create Custom Group	All Computers	✗	Only Computer (Static, Dynamic)	Only Computer (Static, Dynamic)
Create Custom Group	Scope based Technicians	✗	Only Computer (Static, Dynamic)	Only Comuter (Static, Dynamic)
Modify User details	All Computers	✗	✗	✔
Modify User details	Scope based Technicians	✗	✗	✔
Install/Uninstall Agent	All Computers	✗	✔	✔
Install/Uninstall Agent	Scope based Technicians	✗	✔	✔
Remote Offices	All Computers	✔	✗	✔
Remote Offices	Scope based Technicians	✔	✗	✔
IP Scope	All Computers	✔ (view only)	✔ (view only)	✔ (view only)
IP Scope	Scope based Technicians	✔ (view only)	✔ (view only)	✔ (view only)
Active Directory Sync	All Computers	✗	✗	✗
Active Directory Sync	Scope based Technicians	✗	✗	✗
Inactive Computer Policy Policy	All Computers	✗	✗	✗
Inactive Computer Policy Policy	Scope based Technicians	✗	✗	✗
Agent Settings	All Computers	✗	✗	✗
Agent Settings	Scope based Technicians	✗	✗	✗

Configurations

Features	Scope	Read	Write	Full-Control
Create Configurations (User/Computer)	All Computers	✗	✔	✔
Create Configurations (User/Computer)	Scope based Technicians	✗	✔	✔
Create Custom Group	All Computers	✗	Only Computer (Static, Dynamic)	Only Computer (Static, Dynamic)
Create Custom Group	Scope based Technicians	✗	Only Computer (Static, Dynamic)	Only Comuter (Static, Dynamic)
Configuration Templates	All Computers	✗	✔	✔
Configuration Templates	Scope based Technicians	✗	✔	✔
Deploying Collections (User/Computer)	All Computers	✗	✔	✔
Deploying Collections (User/Computer)	Scope based Technicians	✗	✔	✔
Install/Uninstall Software	All Computers	✗	✗	✗
Install/Uninstall Software	Scope based Technicians	✗	✗	✗
Install/Uninstall Patch	All Computers	✗	✗	✗
Install/Uninstall Patch	Scope based Technicians	✗	✗	✗
View Configurations	All Computers	✔ (View only)	✔ (View only)	✔ (View only)
View Configurations	Scope based Technicians	✔ (View only)	✔ (View only)	✔ (View only)
Edit Configuration	All Computers	✗	✔	✔
Edit Configuration	Scope based Technicians	✗	✔	✔
Delete Configuration	All Computers	✗	✔	✔
Delete Configuration	Scope based Technicians	✗	✔	✔
Save as New in Configuration	All Computers	✗	✔	✔
Save as New in Configuration	Scope based Technicians	✗	✔	✔
Power Management Configuration	All Computers	✗	✔	✔
Power Management Configuration	Scope based Technicians	✗	✔	✔

Software Deployment

Features	Scope	Read	Write	Full-Control
Create Software Package	All Computers	✗	✗	✔
Create Software Package	Scope based Technicians	✗	✗	✔
Create Custom Group	All Computers	✗	Only Computer (Static, Dynamic)	Only Computer (Static, Dynamic)
Create Custom Group	Scope based Technicians	✗	Only Computer (Static, Dynamic)	Only Computer (Static, Dynamic)
Install/Uninstall Software (User/Computer)	All Computers	✗	✔	✔
Install/Uninstall Software (User/Computer)	Scope based Technicians	✗	✔	✔
Create Package from Templates	All Computers	✗	✗	✔
Create Package from Templates	Scope based Technicians	✗	✗	✔
View Sensitive Data in Created Package	All Computers	✗	✗	✔
View Sensitive Data in Created Package	Scope based Technicians	✗	✗	✔
View Configuration	All Computers	✔ (view only)	✔ (view only)	✔ (view only)
View Configuration	Scope based Technicians	✔ (view only)	✔ (view only)	✔ (view only)
Templates	All Computers	✗	✗	✔
Templates	Scope based Technicians	✗	✗	✔
Software Repository Settings	All Computers	✗	✗	✗
Software Repository Settings	Scope based Technicians	✗	✗	✗
Sync Application details	All Computers	✗	✗	✗
Sync Application details	Scope based Technicians	✗	✗	✗
Self Service Portal	All Computers	✔ (view only)	✔ (view only)	✔ (view only)
Self Service Portal	Scope based Technicians	✔ (view only)	✔ (view only)	✔ (view only)
Self Service Portal Settings	All Computers	✗	✗	✔
Self Service Portal Settings	Scope based Technicians	✗	✗	✔ (View only)
Save as New from Packages	All Computers	✗	✗	✔
Save as New from Packages	Scope based Technicians	✗	✗	✔

Inventory

Features	Scope	Read	Write	Full-Control
Computers view (Bulk update/ Import CSV)	All Computers	✔(View only)	✔(Bulk Update only)	✔
Computers view (Bulk update/ Import CSV)	Scope based Technicians	✔(View only)	✔(Bulk Update only)	✔
Create Custom Group	All Computers	✗	Only Computer (Static, Dynamic)	Only Computer (Static, Dynamic)
Create Custom Group	Scope based Technicians	✗	Only Computer (Static, Dynamic)	Only Computer (Static, Dynamic)
Add/Modify Computer details	All Computers	✗	✔	✔
Add/Modify Computer details	Scope based Technicians	✗	✔	✔
Hardware view	All Computers	✔ (View only)	✔ (View only)	✔ (View only)
Hardware view	Scope based Technicians	✔ (View only)	✔ (View only)	✔ (View only)
Software view	All Computers	✔ (View only)	✔ (View only)	✔ (View only)
Software view	Scope based Technicians	✔ (View only)	✔ (View only)	✔ (View only)
Move Software	All Computers	✗	✗	✔
Move Software	Scope based Technicians	✗	✗	✗
Alert Settings	All Computers	✔ (View only)	✔ (View only)	✔ (View only)
Alert Settings	Scope based Technicians	✗	✗	✔ (View only)
Inventory Reports	All Computers	✔ (View only)	✔ (View only)	✔ (View only)
Inventory Reports	Scope based Technicians	✔ (View only)	✔ (View only)	✔ (View only)
Inventory Scan	All Computers	✔	✔	✔
Inventory Scan	Scope based Technicians	✔	✔	✔
Software Metering	All Computers	✔ (View only)	✔ (View only)	✔
Software Metering	Scope based Technicians	✔ (View only)	✔ (View only)	✔
Manage License	All Computers	✔ (View only)	✔	✔
Manage License	Scope based Technicians	✔ (View only)	✔	✔
Software Grouping	All Computers	✔ (View only)	✔ (View only)	✔
Software Grouping	Scope based Technicians	✔ (View only)	✔ (View only)	✔
Prohibit Software	All Computers	✔ (View only)	✔ (View only)	✔
Prohibit Software	Scope based Technicians	✔ (View only)	✔ (View only)	✔
Block exe	All Computers	✔ (View only)	✔ (View only)	✔
Block exe	Scope based Technicians	✔ (View only)	✔ (View only)	✔ (View only)
File Scan rules	All Computers	✔ (View only)	✔ (View only)	✔
File Scan rules	Scope based Technicians	✔ (View only)	✔ (View only)	✔
Add Global Exclusions	All Computers	✗	✗	✔
Add Global Exclusions	Scope based Technicians	✗	✗	✔
Manage Software Category	All Computers	✔ (View only)	✔ (View only)	✔
Manage Software Category	Scope based Technicians	✔ (View only)	✔ (View only)	✔
Configure Alerts	All Computers	✗	✔	✔
Configure Alerts	Scope based Technicians	✗	✔	✔
Schedule Inventory Scan	All Computers	✗	✔	✔
Schedule Inventory Scan	Scope based Technicians	✗	✔	✔

Reports

Features	Scope	Read	Write	Full-Control
Schedule Reports	All Computers	✔(view only)	✔	✔
Schedule Reports	Scope based Technicians	✔(view only)	✔	✔
Create Custom Group	All Computers	✗	Only Computer (Static, Dynamic)	Only Computer (Static, Dynamic)
Create Custom Group	Scope based Technicians	✗	Only Computer (Static, Dynamic)	Only Computer (Static, Dynamic)
Custom Reports	All Computers	✗	✔	✔
Custom Reports	Scope based Technicians	✗	✔	✔
Active Directory Reports	All Computers	✔(view only)	✔	✔
Active Directory Reports	Scope based Technicians	✔(view only)	✔	✔
Module based Reports	All Computers	✔(view only)	✔(view only)	✔
Module based Reports	Scope based Technicians	✔(view only)	✔ (view only)	✔

Remote Control

Features	Scope	Administrator	Tools-Read	Tools-Write	Tools-Full	RDS-Read	RDS-Write	RDS-Full
Computers	All Computers	✔	✗	✗	✗	✔ (view only)	✔	✔
Computers	Scope based Technicians		✗	✗	✗	✗	✗	✗
Create Custom Group	All Computers	✔	✗	Only Computer (Static, Dynamic)	Only Computer (Static, Dynamic)	✗	Only Computer (Static, Dynamic)	Only Computer (Static, Dynamic)
Create Custom Group	Scope based Technicians		✗	Only Computer (Static, Dynamic)	Only Computer (Static, Dynamic)	✗	Only Computer (Static, Dynamic)	Only Computer (Static, Dynamic)
Screen Recording	All Computers	✔	✗	✗	✗	✗	✗	✔
Screen Recording	Scope based Technicians		✗	✗	✗	✗	✗	✗
Performance	All Computers	✔	✗	✗	✗	✗	✗	✔
Performance	Scope based Technicians		✗	✗	✗	✗	✗	✗
History	All Computers	✔	✗	✗	✗	✔(view only)	✔	✔
History	Scope based Technicians		✗	✗	✗	✔ (view only)	✔	✔
User confirmation	All Computers	✔	✗	✗	✗	✗	✗	✗
User confirmation	Scope based Technicians		✗	✗	✗	✗	✗	✗
User confirmation- Exclude computers	All Computers	✔	✗	✗	✗	✗	✗	✗
User confirmation- Exclude computers	Scope based Technicians	✗	✗	✗	✗	✗	✗	✗

Chat

Features	Scope	Administrator	Tools-Read	Tools-Write	Tools-Full	RDS-Read	RDS-Write	RDS-Full
Users	All Computers	✔	✔	✔	✔	✔	✔	✔
Users	Scope based Technicians		✔	✔	✔	✔	✔	✔
History	All Computers	✔	✔	✔	✔	✔	✔
History	Scope based Technicians		✔	✔	✔	✔	✔	✔
History-Settings	All Computers	✔	✗	✔	✔	✗	✔	✔
History-Settings	Scope based Technicians		✔	✗	✗	✗	✗	✗

System Manager

Features	Scope	Administrator	Tools-Read	Tools-Write	Tools-Full	RDS-Read	RDS-Write	RDS-Full
Export History	All Computers	✔	✗	✔	✔	✗	✗	✗
Export History	Scope based Technicians		✗	✔	✔	✗	✗	✗
Export Settings	All Computers	✔	✗	✔	✔	✗	✗	✗
Export Settings	Scope based Technicians		✗	✗	✗	✗	✗	✗
Task Manager	All Computers	✔	✔(view only)	✔	✔	✗	✗	✗
Task Manager	Scope based Technicians		✔(view only)	✔	✔	✗	✗	✗
Services	All Computers	✔	✔(view only)	✔	✔	✗	✗	✗
Services	Scope based Technicians		✔(view only)	✔	✔	✗	✗	✗
Computer Rename	All Computers	✔	✗	✔	✗	✗	✗	✗
Computer Rename	Scope based Technicians		✗	✔	✗	✗	✗	✗
Terminal	All Computers	✔	✗	✔	✗	✗	✗	✗
Terminal	Scope based Technicians		✗	✔	✗	✗	✗	✗
Registry	All Computers	✔	✗	✔	✗	✗	✗	✗
Registry	Scope based Technicians		✗	✔	✗	✗	✗	✗
File Manager	All Computers	✔	✗	✔	✗	✗	✗	✗
File Manager	Scope based Technicians		✗	✔	✗	✗	✗	✗
Event Viewer	All Computers	✔(view only)	✔(view only)	✔(view only)	✔(view only)	✗	✗	✗
Event Viewer	Scope based Technicians		✔(view only)	✔(view only)	✔(view only)	✗	✗	✗
Device Manager	All Computers	✔	✔(view only)	✔(view only)	✔	✗	✗	✗
Device Manager	Scope based Technicians		✔(view only)	✔(view only)	✔	✗	✗	✗
Shares	All Computers	✔	✔(view only)	✔	✔	✗	✗	✗
Shares	Scope based Technicians		✔(view only)	✔	✔	✗	✗	✗
Printers	All Computers	✔	✔(view only)	✔	✔	✗	✗	✗
Printers	Scope based Technicians		✔(view only)	✔	✔	✗	✗	✗
Groups	All Computers	✔	✔(view only)	✔	✔	✗	✗	✗
Groups	Scope based Technicians		✔(view only)	✔	✔	✗	✗	✗
Softwares	All Computers	✔	✔(view only)	✔	✔	✗	✗	✗
Softwares	Scope based Technicians		✔(view only)	✔	✔	✗	✗	✗
Users	All Computers	✔(view only)	✔(view only)	✔(view only)	✔(view only)	✗	✗	✗
Users	Scope based Technicians		✔(view only)	✔(view only)	✔(view only)	✗	✗	✗
Task Scheduler	All Computers	✔	✔(view only)	✔	✔	✗	✗	✗
Task Scheduler	Scope based Technicians		✔(view only)	✔	✔	✗	✗	✗
Hardware	All Computers	✔(view only)	✔(view only)	✔(view only)	✔(view only)	✗	✗	✗
Hardware	Scope based Technicians		✔(view only)	✔(view only)	✔(view only)	✗	✗	✗

Remote Shutdown

Features	Scope	Administrator	Tools-Read	Tools-Write	Tools-Full	RDS-Read	RDS-Write	RDS-Full
Shutdown ✗w	All Computers	✔	✔(view only)	✔	✔	✗	✗	✗
Shutdown ✗w	Scope based Technicians		✔(view only)	✔	✔	✗	✗	✗
Scheduled Shutdown	All Computers	✔	✔(view only)	✔	✔	✗	✗	✗
Scheduled Shutdown	Scope based Technicians		✔(view only)	✔	✔	✗	✗	✗

Wake on LAN

Features	Scope	Administrator	Tools-Read	Tools-Write	Tools-Full	RDS-Read	RDS-Write	RDS-Full
Wake up ✗w	All Computers	✔	✔(view only)	✔	✔	✗	✗	✗
Wake up ✗w	Scope based Technicians		✔(view only)	✔	✔	✗	✗	✗
Settings	All Computers	✔	✗	✔	✔	✗	✗	✗
Settings	Scope based Technicians		✗	✗	✗	✗	✗	✗
Scheduled Wake on LAN	All Computers	✔	✔(view only)	✔	✔	✗	✗	✗
Scheduled Wake on LAN	Scope based Technicians		✔(view only)	✔	✔	✗	✗	✗

System Tools

Features	Scope	Administrator	Tools-Read	Tools-Write	Tools-Full	RDS-Read	RDS-Write	RDS-Full
Task View	All Computers	✔	✔(view only)	✔	✔	✗	✗	✗
Task View	Scope based Technicians		✔(view only)	✔	✔	✗	✗	✗
Settings	All Computers	✔	✗	✗	✔	✗	✗	✗
Settings	Scope based Technicians		✗	✗	✗	✗	✗	✗

Tools Homepage

Features	Scope	Administrator	Tools-Read	Tools-Write	Tools-Full	RDS-Read	RDS-Write	RDS-Full
Homepage	All Computers	✔	✔	✔	✔	✔	✔	✔
Homepage	Scope based Technicians		✔	✔	✔	✔	✔	✔
Action Log Viewer	All Computers	✔(view only)	✔(view only)	✔(view only)	✔(view only)	✔(view only)	✔(view only)	✔(view only)
Action Log Viewer	Scope based Technicians		✔(view only)	✔(view only)	✔(view only)	✔(view only)	✔(view only)	✔(view only)

Tools Settings

Features	Scope	Administrator	Tools-Read	Tools-Write	Tools-Full	RDS-Read	RDS-Write	RDS-Full
Port Settings	All Computers	✔	✗	✗	✗	✗	✗	✗
Port Settings	Scope based Technicians		✗	✗	✗	✗	✗	✗
System Manager Settings	All Computers	✔	✗	✗	✗	✗	✗	✗
System Manager Settings	Scope based Technicians		✗	✗	✗	✗	✗	✗

Announcement

Features

Scope

Administrator

Tools-Read

Tools-Write

Tools-Full

RDS-Read

RDS-Write

RDS-Full

Task View

All Computers

✔

✗

Scope based Technicians

✔(view only)

✔

✗

OS Deployment

Features	Scope	Read	Full-Control	✗ Access
Imaging	All Computers	✔(view only)	✔	✗
Imaging	Scope based Technicians	N/A	N/A	N/A
Deployment template	All Computers	✔(view only)	✔	✗
Deployment template	Scope based Technicians	N/A	N/A	N/A
Deployment task	All Computers	✔(view only)	✔	✗
Deployment task	Scope based Technicians	N/A	N/A	N/A
Instant task	All Computers	✔(view only)	✔	✗
Instant task	Scope based Technicians	N/A	N/A	N/A
Standalone Task	All Computers	✔(view only)	✔	✗
Standalone Task	Scope based Technicians	N/A	N/A	N/A
Media	All Computers	✔(view only)	✔	✗
Media	Scope based Technicians	N/A	N/A	N/A
USMT	All Computers	✔(view only)	✔	✗
USMT	Scope based Technicians	N/A	N/A	N/A
Deployment	All Computers	✔(view only)	✔	✗
Deployment	Scope Based Technicians	N/A	N/A	N/A
Post Deployment	All Computers	✔(view only)	✔	✗
Post Deployment	Scope Based Technicians	N/A	N/A	N/A
Remote Office	All Computers	✔(view only)	✔	✗
Remote Office	Scope Based Technicians	N/A	N/A	N/A

Application Control

Features	Scope	Read	Write	Full-Control
Create App Group	All Computers	✗	✔	✔
Create App Group	Scope based Technicians	✗	✔	✔
Modify App Group	All Computers	✗	✔	✔
Modify App Group	Scope based Technicians	✗	✔	✔
Delete App Group	All Computers	✗	✗	✔
Delete App Group	Scope based Technicians	✗	✔	✔
View App Group	All Computers	✔(view only)	✔ (view only)	✔
View App Group	Scope based Technicians	(view only)	✔	✔
Create Custom Group	All Computers	✗	✗	✔
Create Custom Group	Scope based Technicians	✗	✗	✔
Associate Policy	All Computers	✗	✗	✔
Associate Policy	Scope based Technicians	✗	✗	✔
Modify Associated Policy	All Computers	✗	✗	✔
Modify Associated Policy	Scope based Technicians	✗	✗	✔
Delete Associated Policy	All Computers	✗	✗	✔
Delete Associated Policy	Scope based Technicians	✗	✗	✔
View Associated Policy	All Computers	✔(view only)	✔(view only)	✔
View Associated Policy	Scope based Technicians	✔(view only)	✔	✔
Create Temporary Access	All Computers	✗	✗	✔
Create Temporary Access	Scope based Technicians	✗	✗	✔
Modify Temporary Access	All Computers	✗	✗	✔
Modify Temporary Access	Scope based Technicians	✗	✔	✔
Delete Temporary Access	All Computers	✗	✗	✔
Delete Temporary Access	Scope based Technicians	✗	✔	✔
View Temporary Access	All Computers	✔(view only)	✔(view only)	✔
View Temporary Access	Scope based Technicians	✔(view only)	✔(view only)	✔
Create Privilege Group	All Computers	✗	✗	✔
Create Privilege Group	Scope based Technicians	✗	✗	✔
Modify Privilege Group	All Computers	✗	✗	✔
Modify Privilege Group	Scope based Technicians	✗	✗	✔
View Privilege Group	All Computers	✔(view only)	✔ (view only)	✔
View Privilege Group	Scope based Technicians	✔(view only)	✔ (view only)	✔
Save Manage Exclusion Policy	All Computers	✗	✗	✔
Save Manage Exclusion Policy	Scope based Technicians	✗	✗	✔
View Manage Exclusion Policy	All Computers	✔(view only)	✔ (view only)	✔
View Manage Exclusion Policy	Scope based Technicians	✔(view only)	✔ (view only)	✔
Remove Local admin	All Computers	✗	✗	✔
Remove Local admin	Scope based Technicians	✗	✗	✔
View Local admin	All Computers	✔(view only)	✔ (view only)	✔
View Local admin	Scope based Technicians	✔(view only)	✔ (view only)	✔

Device Control

Features	Scope	Read	Write	Full-Control
Create/duplicate policy	All Computers	✗	✔	✔
Create/duplicate policy	Scope based Technicians	✗	✔	✔
Publish policy	All Computers	✗	✗	✔
Publish policy	Scope based Technicians	✗	✗	✗
Modify policy	All Computers	✗	✔	✔
Modify policy	Scope based Technicians	✗	✔	✔
View policy	All Computers	✔(view only)	✔(view only)	✔
View policy	Scope based Technicians	✔(view only)	✔(view only)	✔
Decline/Trash/Restore/ Delete policy	All Computers	✗	✗	✔
Decline/Trash/Restore/ Delete policy	Scope based Technicians	✗	✗	✔
Create Custom Group	All Computers	✗	✗	✔
Create Custom Group	Scope based Technicians	✗	✗	✔
Deploy Policy	All Computers	✗	✗	✔
Deploy Policy	Scope based Technicians	✗	✗	✔
Modify deploy Policy	All Computers	✗	✗	✔
Modify deploy Policy	Scope based Technicians	✗	✗	✔
View deploy Policy	All Computers	✗	✗	✔
View deploy Policy	Scope based Technicians	✗	✗	✔
Create/duplicate Trusted Device	All Computers	✗	✔	✔
Create/duplicate Trusted Device	Scope based Technicians	✗	✔	✔
Publish Trusted Device	All Computers	✗	✗	✔
Publish Trusted Device	Scope based Technicians	✗	✔	✔
Modify/Restore/Delete Trusted Device	All Computers	✗	✗	✔
Modify/Restore/Delete Trusted Device	Scope based Technicians	✗	✗	✔
View Trusted Device	All Computers	✔(View only)	✔(View only)	✔
View Trusted Device	Scope based Technicians	✔(View only)	✔ (View only)	✔
Create Temporary Access	All Computers	✗	✗	✔
Create Temporary Access	Scope based Technicians	✗	✗	✔
Publish Temporary Access	All Computers	✗	✗	✔
Publish Temporary Access	Scope based Technicians	✗	✗	✔
Modify Temporary Access	All Computers	✗	✗	✔
Modify Temporary Access	Scope based Technicians	✗	✗	✔
View Temporary Access	All Computers	✔	✔	✔
View Temporary Access	Scope based Technicians	✔	✔	✔
Decline/Revoke/Delete Temporary Access	All Computers	✗	✗	✔
Decline/Revoke/Delete Temporary Access	Scope based Technicians	✗	✗	✔
Save Audit settings	All Computers	✗	✗	✔
Save Audit settings	Scope based Technicians	✗	✗	✔
Extension grouping	All Computers	✗	✗	✔
Extension grouping	Scope based Technicians	✗	✗	✔

Bitlocker Management

Features	Scope	Read	Write	Full-Control
Create/duplicate policy	All Computers	✗	✔	✔
Create/duplicate policy	Scope based Technicians	✗	✔	✔
Publish policy	All Computers	✗	✗	✔
Publish policy	Scope based Technicians	✗	✗	✔
Modify policy	All Computers	✗	✔	✔
Modify policy	Scope based Technicians	✗	✔	✔
Decline/Delete/Restore policy	All Computers	✗	✗	✔
Decline/Delete/Restore policy	Scope based Technicians	✗	✗	✔
Create Custom Group	All Computers	✗	✗	✔
Create Custom Group	Scope based Technicians	✗	✗	✔
Deploy Policy	All Computers	✗	✗	✔
Deploy Policy	Scope based Technicians	✗	✗	✔
Modify deploy Policy	All Computers	✗	✗	✔
Modify deploy Policy	Scope based Technicians	✗	✗	✔
View deployment Policy	All Computers	✗	✗	✔
View deployment Policy	Scope based Technicians	✗	✗	✔
List Recovery Key	All Computers	✗	✗	✔
List Recovery Key	Scope based Technicians	✗	✗	✔
On-demand action	All Computers	✗	✗	✔
On-demand action	Scope based Technicians	✗	✗	✔

.....