|
iburnell -> How to delegate console permissions to different groups (6/22/2008 6:49:47 AM)
|
The client I'm at want to have lots of different groups of people with different access to the SCCM console. For example
Group A - allow them to manage their own package/collections and advertisements - they must NOT be able to send a package to other regions machines - for example servers in head office
Group B - similar to above to manage their own little area
(All this is being based on them all having access to central site console - I appreciate it may pan out they have to have their own primary with their own local access to the packages/collection there)
Though I had the answer in that I could create some AD security groups such as
SMS Administrators (Group A)
SMS Administrator (Group B)
SMS Administrators (Global)
and then in the console create relevent FOLDERS e.g. Packages (Group A) and Packages (Group B) so that they could only manage in their own folder
However, I don't think that works because the wizard is only giving you access to the instance of the collection and doesn't recognize it as a folder, so you can't create sub-collections etc.
Anybody had similar issues such as this ?
Thanks
|
|
|
|
