User Role and Permission
This document will explain the roles and permissions which can be mapped for users. The default roles available in Endpoint Central MSP are given below:
- Administrator
- Customer Administrator
- Auditor
- Guest
- IT Asset Manager
- Mobile Device Manager
- Patch Manager
- Remote Desktop Viewer
- Technician
A user with Administrator role will have complete access to all the features available in Endpoint Central MSP.
A user with Customer Administrator role will have access to all the features available in Endpoint Central MSP for that particular customer who is associated with the user.
| Module Name | Full Control | Write | Read | No Access |
|---|---|---|---|---|
| Desktop Control | ||||
| Configurations |
|
|
|
|
| Patch Management |
|
|
|
|
| Software Deployment |
|
| ||
| Inventory |
|
| ||
| Tools |
|
| ||
| Remote Desktop Sharing |
|
| ||
| Report |
|
|
| |
| SoM |
|
|
| |
| MDM Control | ||||
| Profile Management |
|
| ||
| App Management |
|
| ||
| Inventory |
|
| ||
| Report |
|
|
|
|
| Enrollment |
|
| ||
| Content Management |
|
| ||
| OS Update Management |
|
| ||
| Remote Control |
|
| ||
| Module Name | Full Control | Write | Read | No Access |
|---|---|---|---|---|
| Desktop Control | ||||
| Configurations |
|
|
| |
| Patch Management |
|
|
| |
| Software Deployment |
|
|
| |
| Inventory |
|
|
| |
| Tools |
|
|
| |
| Remote Desktop Sharing |
|
|
| |
| Report |
|
|
| |
| SoM |
|
|
| |
| MDM Control | ||||
| Profile Management |
|
|
| |
| App Management |
|
|
| |
| Inventory |
|
|
| |
| Report |
|
|
| |
| Enrollment |
|
|
| |
| Content Management |
|
|
| |
| OS Update Management |
|
|
| |
| Remote Control |
|
|
| |
| Module Name | Full Control | Write | Read | No Access |
|---|---|---|---|---|
| Desktop Control | ||||
| Configurations |
|
| ||
| Patch Management |
|
| ||
| Software Deployment |
|
| ||
| Inventory |
|
|
|
|
| Tools |
|
| ||
| Remote Desktop Sharing |
|
| ||
| Report |
|
| ||
| SoM |
|
| ||
| MDM Control | ||||
| Profile Management |
|
| ||
| App Management |
|
| ||
| Inventory |
|
|
|
|
| Report |
|
| ||
| Enrollment |
|
| ||
| Content Management |
|
| ||
| OS Update Management |
|
| ||
| Remote Control |
|
| ||
| Module Name | Full Control | Write | Read | No Access |
|---|---|---|---|---|
| Desktop Control | ||||
| Configurations |
|
| ||
| Patch Management |
|
| ||
| Software Deployment |
|
| ||
| Inventory |
|
| ||
| Tools |
|
| ||
| Remote Desktop Sharing |
|
| ||
| Report |
|
| ||
| SoM |
|
| ||
| MDM Control | ||||
| CreateProfile Management |
|
|
|
|
| CreateApp Management |
|
|
|
|
| CreateInventory |
|
|
|
|
| CreateReport |
|
|
|
|
| Enrollment |
|
|
|
|
| Content Management |
|
|
|
|
| OS Update Management |
|
|
|
|
| Remote Control |
|
|
|
|
| Module Name | Full Control | Write | Read | No Access |
|---|---|---|---|---|
| Desktop Control | ||||
| Configurations |
|
| ||
| Patch Management |
|
|
|
|
| Software Deployment |
|
| ||
| Inventory |
|
| ||
| Tools |
|
| ||
| Remote Desktop Sharing |
|
| ||
| Report |
|
| ||
| SoM |
|
| ||
| MDM Control | ||||
| CreateProfile Management |
|
| ||
| CreateApp Management |
|
| ||
| Inventory |
|
| ||
| Report |
|
| ||
| Enrollment |
|
| ||
| Content Management |
|
| ||
| OS Update Management |
|
| ||
| Remote Control |
|
| ||
| Module Name | Full Control | Write | Read | No Access |
|---|---|---|---|---|
| Desktop Control | ||||
| Configurations |
|
| ||
| Patch Management |
|
| ||
| Software Deployment |
|
| ||
| Inventory |
|
|
| |
| Tools |
|
|
|
|
| Remote Desktop Sharing |
|
| ||
| Report |
|
| ||
| SoM |
|
| ||
| MDM Control | ||||
| Profile Management |
|
| ||
| App Management |
|
|
| |
| Inventory |
|
|
|
|
| Report |
|
|
| |
| Enrollment |
|
| ||
| ontent Management |
|
| ||
| OS Update Management |
|
|
| |
| Remote Control |
|
| ||
| Module Name | Full Control | Write | Read | No Access |
|---|---|---|---|---|
| Desktop Control | ||||
| Configurations |
|
|
|
|
| Patch Management |
|
|
|
|
| Software Deployment |
|
|
|
|
| Inventory |
|
|
|
|
| Tools |
|
|
|
|
| Remote Desktop Sharing |
|
|
|
|
| Report |
|
|
|
|
| SoM |
|
|
|
|
| MDM Control | ||||
| Profile Management |
|
|
|
|
| App Management |
|
|
|
|
| Inventory |
|
|
|
|
| Report |
|
|
|
|
| Enrollment |
|
| ||
| Content Management |
|
|
|
|
| OS Update Management |
|
|
|
|
| Remote Control |
|
|
|
|
| OSD Control | ||||
You can also create roles and customize it based on your requirement. The below table explains in detail about the permissions that can be specified while creating/modifying a role in Endpoint Central.
| Action | Full Control | Write | Read | |
|---|---|---|---|---|
| Configuration | ||||
| CreateConfigurations (Users and Computers) |
|
|
| |
| Create Configurations from templates |
|
|
| |
| Create Configurations from Collections (Users and Computers) |
|
|
| |
| Install software |
|
|
| |
| Install patches |
|
|
| |
| View Configurations |
|
|
| |
| Edit Configurations |
|
|
| |
| Delete Configurations |
|
|
| |
| 'Save as New' from Configurations |
|
|
| |
| Power Management Configuration |
|
|
| |
| Patch Mgmt. | ||||
| Install Patches |
|
|
| |
| Automate Patch Deployment (APD) |
|
|
| |
| APD Task List View |
|
|
| |
| Edit or Delete APD |
|
|
| |
| View Configurations |
|
|
| |
| View Deployment Templates & Add Templates |
|
|
| |
| Edit or Delete Deployment Templates |
|
|
| |
| Approve/Decline/Un Approve - Applicable Patches |
|
|
| |
| Download / Re-download /Delete Patches |
|
|
| |
| Deploy Missing Patches to All Managed Systems |
|
|
| |
| Scan/Scan All |
|
|
| |
| Patch Report |
|
|
| |
| Patch Settings (Except Proxy ) |
|
|
| |
| Update Vulnerability Database |
|
|
| |
Software Deployment | ||||
| Create Software Package |
|
|
| |
| Install/uninstall Software (Computer) |
|
|
| |
| Install/uninstall Software (User) |
|
|
| |
| Create Package from Templates |
|
|
| |
| View Configurations |
|
|
| |
| Deployment Templates |
|
|
| |
| Software Repository Settings |
|
|
| |
| Sync Application Details |
|
|
| |
| Self Service Portal |
|
|
| |
| Self Service Portal Settings |
|
|
| |
| 'Save as New' from Packages |
|
|
| |
Inventory | ||||
| Computers View (Bulk Update/ Import CSV) |
|
|
| |
| Computers View - Import CSV |
|
|
| |
| Add / Modify Computer Details |
|
|
| |
| Hardware's View |
|
|
| |
| Software View |
|
|
| |
| Move Software To |
|
|
| |
| Alerts settings |
|
|
| |
| Inventory Reports |
|
|
| |
| Scan/Scan all Systems |
|
|
| |
| Software Metering (Add/Delete/Enable/Disable Rule) |
|
|
| |
| Manage License |
|
|
| |
| Group software |
|
|
| |
| Configure Prohibited Software |
|
|
| |
| Block executables |
|
|
| |
| File scan rules |
|
|
| |
| Add Global Exclusions |
|
|
| |
| Manage Software Category |
|
|
| |
| Configure Alerts |
|
|
| |
| Schedule Inventory Scan |
|
|
| |
| Feed Custom Data for Computers |
|
|
| |
Tools | ||||
| Remote Control Computer view |
|
|
| |
| Remote Control History view |
|
|
| |
| Settings |
|
|
| |
| User Confirmation & Exclude Computers |
|
|
| |
| Screen Recording |
|
|
| |
| Performance |
|
|
| |
| Wake On LAN - Wake up & schedule wake up |
|
|
| |
| Remote Shutdown - Shutdown now & schedule shutdown |
|
|
| |
| System Tools - Action & Functionality |
|
|
| |
| Announcement |
|
|
| |
| Chat |
|
|
| |
| System Manager tools (Except Command Prompt, Registry & File Manager) |
|
|
| |
| System Manager Tools - Command Prompt, Registry & File Manager |
|
|
| |
Reports | ||||
| Schedule Reports |
|
|
| |
| Custom Reports |
|
|
| |
| Active Directory Reports |
|
|
| |
| Reports from Other Modules |
|
|
| |
SoM | ||||
| Add/Remove computers |
|
|
| |
| Edit credential |
|
|
| |
| Install/uninstall agent |
|
|
| |
| Remote Offices |
|
|
| |
| IP Scope |
|
|
| |
| SOM Policy |
|
|
| |
| Agent settings |
|
|
| |
Global Settings | ||||
| User Administration |
|
|
| |
| Help Desk Settings |
|
|
| |
| ServiceDesk Plus Settings |
|
|
| |
| Server Settings |
|
|
| |
| Mail Server Settings |
|
|
| |
| Custom Groups |
|
|
| |
| Re-branding |
|
|
| |
| PgSQL Remote DB Access |
|
|
| |
| DC Server Migration |
|
|
| |
| Configuration Settings |
|
|
| |
| Security Settings |
|
|
| |
| Import SSL Certificates |
|
|
| |
| Privacy Settings |
|
|
| |
| Forwarding Server |
|
|
| |
| DPO Dashboard |
|
|
| |
| Export Settings |
|
|
| |
| Server Maintenance |
|
|
| |
| Failover Server |
|
|
| |
| NAT Settings |
|
|
| |
| MSSQL Migration |
|
|
| |
| DB Optimization |
|
|
| |
Report Settings | ||||
| AD Report Settings |
|
|
| |
| User Logon Settings |
|
|
| |
Admin Tools | ||||
| Action Log Viewer |
|
|
| |
| Alerts |
|
|
| |
| Database Backup |
|
|
| |
Browser Security* | ||||
| Insights |
|
|
| |
| Policies |
|
|
| |
| Extension Repository Management |
|
|
| |
| Compliance |
|
|
| |
Security Add-ons* | ||||
| BitLocker Management (All features) |
|
|
| |
| BitLocker Management (Recovery Key) |
|
|
| |
| Application Control |
|
|
| |
Malware Protection* | ||||
| Malware Protection |
|
|
| |
* - Applicable only in Cloud