Endpoint Central supports pre-defined and user-defined roles to manage their IT infrastructure. Users can customize roles according to their organization's policies and associate with a scope of devices to be managed. Admins can assign role with read/write/full-control privileges depending on the conditions required. Find a detailed view on the access provided for read, write and full control users in the below grid.
Note: Scope based technician includes Remote Office and Custom Group technician.
Features |
Scope |
Read |
Write |
Full-control |
Patch approval settings |
All Computers |
✔ (view only) |
✔ (view only) |
✔ |
Scope based Technicians |
✔ (view only) |
✔ (view only) |
✔ (view only) |
|
Create Custom Group |
All Computers |
✗ |
Only Computer (Static, Dynamic) |
Only Computer (Static, Dynamic) |
Scope based Technicians |
✗ |
Only Computer (Static, Dynamic) |
Only Comuter (Static, Dynamic) |
|
Manual deployment |
All Computers |
✔ (view only) |
✔ |
✔ |
Scope based Technicians |
✔ (view only) |
✔ |
✔ |
|
Test group configuration |
All Computers |
✔ (view only) |
✔ |
✔ |
Scope based Technicians |
✔ (view only) |
✗ |
✗ |
|
Automated patch deployment |
All Computers |
✔ (view only) |
✔ |
✔ |
Scope based Technicians |
✔ (view only) |
✔ |
✔ |
|
Deployment policy |
All Computers |
✔ (view only) |
✔ |
✔ |
Scope based Technicians |
✔ (view only) |
✔ |
✔ |
|
System health policy |
All Computers |
✔ (view only) |
✔ |
✔ |
Scope based Technicians |
✔ (view only) |
✗ |
✗ |
|
Decline patch |
All Computers |
✔ (view only) |
✔ |
✔ |
Scope based Technicians |
✔ (view only) |
✔ (view only) |
✔ (view only) |
|
Schedule shutdown/restart task |
All Computers |
✔ (view only)
|
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Patch predefined reports |
All Computers |
✔ (view only) |
✔ |
✔ |
Scope based Technicians |
✔ (view only) |
✔ |
✔ |
|
Schedule reports |
All Computers |
✔ (view only) |
✔ |
✔ |
Scope based Technicians |
✔ (view only) |
✔ |
✔ |
|
Patch scan |
All Computers |
✔ |
✔ |
✔ |
Scope based Technicians |
✔ |
✔ |
✔ |
|
Restart from resource icon |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Shutdown from resource icon |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Patch database settings |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✗ |
|
Fix system misconfigurations |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✔ |
✔ |
✔ |
|
Uninstall High Risk software |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✔ |
✔ |
✔ |
|
Add Exceptions |
All Computers |
✔ (view only) |
✔ (view only) |
✔ |
Scope based Technicians |
✔ (view only) |
✔ (view only) |
✔ (view only) |
|
CIS policy audit |
All Computers |
✔ (view only) |
✔ |
✔ |
Scope based Technicians |
✔ (view only) |
✔ |
✔ |
|
Schedule Executive reports |
All Computers |
✔ (view only) |
✔ |
✔ |
Scope based Technicians |
✔ (view only) |
✔ |
✔ |
Features |
Scope |
Read |
Write |
Full-control |
Add/Remove Computers |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ (remove option only) |
|
Create Custom Group |
All Computers |
✗ |
Only Computer (Static, Dynamic) |
Only Computer (Static, Dynamic) |
Scope based Technicians |
✗ |
Only Computer (Static, Dynamic) |
Only Comuter (Static, Dynamic) |
|
Modify User details |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Install/Uninstall Agent |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Remote Offices |
All Computers |
✔ |
✗ |
✔ |
Scope based Technicians |
✔ |
✗ |
✔ |
|
IP Scope |
All Computers |
✔ (view only) |
✔ (view only) |
✔ (view only) |
Scope based Technicians |
✔ (view only) |
✔ (view only) |
✔ (view only) |
|
SoM Policy |
All Computers |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✗ |
✗ |
|
Agent Settings |
All Computers |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✗ |
✗ |
Features |
Scope |
Read |
Write |
Full-Control |
Create Configurations (User/Computer) |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Create Custom Group |
All Computers |
✗ |
Only Computer (Static, Dynamic) |
Only Computer (Static, Dynamic) |
Scope based Technicians |
✗ |
Only Computer (Static, Dynamic) |
Only Comuter (Static, Dynamic) |
|
Configuration Templates |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Deploying Collections (User/Computer) |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Install/Uninstall Software |
All Computers |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✗ |
✗ |
|
Install/Uninstall Patch |
All Computers |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✗ |
✗ |
|
View Configurations |
All Computers |
✔ (View only) |
✔ (View only) |
✔ (View only) |
Scope based Technicians |
✔ (View only) |
✔ (View only) |
✔ (View only) |
|
Edit Configuration |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Delete Configuration |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Save as New in Configuration |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Power Management Configuration |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
Features |
Scope |
Read |
Write |
Full-Control |
Create Software Package |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Create Custom Group |
All Computers |
✗ |
Only Computer (Static, Dynamic) |
Only Computer (Static, Dynamic) |
Scope based Technicians |
✗ |
Only Computer (Static, Dynamic) |
Only Computer (Static, Dynamic) |
|
Install/Uninstall Software (User/Computer) |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Create Package from Templates |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
View Configuration |
All Computers |
✔ (view only) |
✔ (view only) |
✔ (view only) |
Scope based Technicians |
✔ (view only) |
✔ (view only) |
✔ (view only) |
|
Templates |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Software Repository Settings |
All Computers |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✗ |
✗ |
|
Sync Application details |
All Computers |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✗ |
✗ |
|
Self Service Portal |
All Computers |
✔ (view only) |
✔ (view only) |
✔ (view only) |
Scope based Technicians |
✔ (view only) |
✔ (view only) |
✔ (view only) |
|
Self Service Portal Settings |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ (View only) |
|
Save as New from Packages | All Computers | ✗ | ✗ | ✔ |
Scope based Technicians | ✗ |
✗ |
✔ |
Features |
Scope |
Read |
Write |
Full-Control |
Computers view (Bulk update/ Import CSV) |
All Computers |
✔(View only) |
✔(Bulk Update only) |
✔ |
Scope based Technicians |
✔(View only) |
✔(Bulk Update only) |
✔ |
|
Create Custom Group |
All Computers |
✗ |
Only Computer (Static, Dynamic) |
Only Computer (Static, Dynamic) |
Scope based Technicians |
✗ |
Only Computer (Static, Dynamic) |
Only Computer (Static, Dynamic) |
|
Add/Modify Computer details |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Hardware view |
All Computers |
✔ (View only) |
✔ (View only) |
✔ (View only) |
Scope based Technicians |
✔ (View only) |
✔ (View only) |
✔ (View only) |
|
Software view |
All Computers |
✔ (View only) |
✔ (View only) |
✔ (View only) |
Scope based Technicians |
✔ (View only) |
✔ (View only) |
✔ (View only) |
|
Move Software |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✗ |
|
Alert Settings |
All Computers |
✔ (View only) |
✔ (View only) |
✔ (View only) |
Scope based Technicians |
✗ |
✗ |
✔ (View only) |
|
Inventory Reports |
All Computers |
✔ (View only) |
✔ (View only) |
✔ (View only) |
Scope based Technicians |
✔ (View only) |
✔ (View only) |
✔ (View only) |
|
Inventory Scan |
All Computers |
✔ |
✔ |
✔ |
Scope based Technicians |
✔ |
✔ |
✔ |
|
Software Metering |
All Computers |
✔ (View only) |
✔ (View only) |
✔ |
Scope based Technicians |
✔ (View only) |
✔ (View only) |
✔ |
|
Manage License |
All Computers |
✔ (View only) |
✔ |
✔ |
Scope based Technicians |
✔ (View only) |
✔ |
✔ |
|
Software Grouping |
All Computers |
✔ (View only) |
✔ (View only) |
✔ |
Scope based Technicians |
✔ (View only) |
✔ (View only) |
✔ |
|
Prohibit Software |
All Computers |
✔ (View only) |
✔ (View only) |
✔ |
Scope based Technicians |
✔ (View only) |
✔ (View only) |
✔ |
|
Block exe |
All Computers |
✔ (View only) |
✔ (View only) |
✔ |
Scope based Technicians |
✔ (View only) |
✔ (View only) |
✔ (View only) |
|
File Scan rules |
All Computers |
✔ (View only) |
✔ (View only) |
✔ |
Scope based Technicians |
✔ (View only) |
✔ (View only) |
✔ |
|
Add Global Exclusions |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Manage Software Category |
All Computers |
✔ (View only) |
✔ (View only) |
✔ |
Scope based Technicians |
✔ (View only) |
✔ (View only) |
✔ |
|
Configure Alerts |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Schedule Inventory Scan |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
Features |
Scope |
Read |
Write |
Full-Control |
Schedule Reports |
All Computers |
✔(view only) |
✔ |
✔ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
|
Create Custom Group |
All Computers |
✗ |
Only Computer (Static, Dynamic) |
Only Computer (Static, Dynamic) |
Scope based Technicians |
✗ |
Only Computer (Static, Dynamic) |
Only Computer (Static, Dynamic) |
|
Custom Reports |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Active Directory Reports |
All Computers |
✔(view only) |
✔ |
✔ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
|
Module based Reports |
All Computers |
✔(view only) |
✔(view only) |
✔ |
Scope based Technicians |
✔(view only) |
✔ (view only) |
✔ |
Features |
Scope |
Administrator |
Tools-Read |
Tools-Write |
Tools-Full |
RDS-Read |
RDS-Write |
RDS-Full |
Computers |
All Computers |
✔ |
✗ |
✗ |
✗ |
✔ (view only) |
✔ |
✔ |
Scope based Technicians |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
||
Create Custom Group |
All Computers |
✔ |
✗ |
Only Computer (Static, Dynamic) |
Only Computer (Static, Dynamic) |
✗ |
Only Computer (Static, Dynamic) |
Only Computer (Static, Dynamic) |
Scope based Technicians |
✗ |
Only Computer (Static, Dynamic) |
Only Computer (Static, Dynamic) |
✗ |
Only Computer (Static, Dynamic) |
Only Computer (Static, Dynamic) |
||
Screen Recording |
All Computers |
✔ |
✗ |
✗ |
✗ |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
||
Performance |
All Computers |
✔ |
✗ |
✗ |
✗ |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
||
History |
All Computers |
✔ |
✗ |
✗ |
✗ |
✔(view only) |
✔ |
✔ |
Scope based Technicians |
✗ |
✗ |
✗ |
✔ (view only) |
✔ |
✔ |
||
User confirmation |
All Computers |
✔ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
||
User confirmation- Exclude computers |
All Computers |
✔ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
Features |
Scope |
Administrator |
Tools-Read |
Tools-Write |
Tools-Full |
RDS-Read |
RDS-Write |
RDS-Full |
Users |
All Computers |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
Scope based Technicians |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
||
History |
All Computers |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ | |
Scope based Technicians |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
||
History-Settings |
All Computers |
✔ |
✗ |
✔ |
✔ |
✗ |
✔ |
✔ |
Scope based Technicians |
✔ |
✗ |
✗ |
✗ |
✗ |
✗ |
Features |
Scope |
Administrator |
Tools-Read |
Tools-Write |
Tools-Full |
RDS-Read |
RDS-Write |
RDS-Full |
Export History |
All Computers |
✔ |
✗ |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✔ |
✔ |
✗ |
✗ |
✗ |
||
Export Settings |
All Computers |
✔ |
✗ |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
||
Task Manager |
All Computers |
✔ |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
||
Services |
All Computers |
✔ |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
||
Computer Rename |
All Computers |
✔ |
✗ |
✔ |
✗ |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✔ |
✗ |
✗ |
✗ |
✗ |
||
Terminal |
All Computers |
✔ |
✗ |
✔ |
✗ |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✔ |
✗ |
✗ |
✗ |
✗ |
||
Registry |
All Computers |
✔ |
✗ |
✔ |
✗ |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✔ |
✗ |
✗ |
✗ |
✗ |
||
File Manager |
All Computers |
✔ |
✗ |
✔ |
✗ |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✔ |
✗ |
✗ |
✗ |
✗ |
||
Event Viewer |
All Computers |
✔(view only) |
✔(view only) |
✔(view only) |
✔(view only) |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔(view only) |
✔(view only) |
✗ |
✗ |
✗ |
||
Device Manager |
All Computers |
✔ |
✔(view only) |
✔(view only) |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔(view only) |
✔ |
✗ |
✗ |
✗ |
||
Shares |
All Computers |
✔ |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
||
Printers |
All Computers |
✔ |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
||
Groups |
All Computers |
✔ |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
||
Softwares |
All Computers |
✔ |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
||
Users |
All Computers |
✔(view only) |
✔(view only) |
✔(view only) |
✔(view only) |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔(view only) |
✔(view only) |
✗ |
✗ |
✗ |
||
Task Scheduler |
All Computers |
✔ |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
||
Hardware |
All Computers |
✔(view only) |
✔(view only) |
✔(view only) |
✔(view only) |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔(view only) |
✔(view only) |
✗ |
✗ |
✗ |
Features |
Scope |
Administrator |
Tools-Read |
Tools-Write |
Tools-Full |
RDS-Read |
RDS-Write |
RDS-Full |
Shutdown ✗w |
All Computers |
✔ |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
||
Scheduled Shutdown |
All Computers |
✔ |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
Features |
Scope |
Administrator |
Tools-Read |
Tools-Write |
Tools-Full |
RDS-Read |
RDS-Write |
RDS-Full |
Wake up ✗w |
All Computers |
✔ |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
||
Settings |
All Computers |
✔ |
✗ |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
||
Scheduled Wake on LAN |
All Computers |
✔ |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
Features |
Scope |
Administrator |
Tools-Read |
Tools-Write |
Tools-Full |
RDS-Read |
RDS-Write |
RDS-Full |
Task View |
All Computers |
✔ |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
||
Settings |
All Computers |
✔ |
✗ |
✗ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
Features |
Scope |
Administrator |
Tools-Read |
Tools-Write |
Tools-Full |
RDS-Read |
RDS-Write |
RDS-Full |
Homepage |
All Computers |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
Scope based Technicians |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
||
Action Log Viewer |
All Computers |
✔(view only) |
✔(view only) |
✔(view only) |
✔(view only) |
✔(view only) |
✔(view only) |
✔(view only) |
Scope based Technicians |
✔(view only) |
✔(view only) |
✔(view only) |
✔(view only) |
✔(view only) |
✔(view only) |
Features |
Scope |
Administrator |
Tools-Read |
Tools-Write |
Tools-Full |
RDS-Read |
RDS-Write |
RDS-Full |
Port Settings |
All Computers |
✔ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
||
System Manager Settings |
All Computers |
✔ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
Scope based Technicians |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
Features |
Scope |
Administrator |
Tools-Read |
Tools-Write |
Tools-Full |
RDS-Read |
RDS-Write |
RDS-Full |
Task View |
All Computers |
✔ |
✔ |
✔ |
✔ |
✗ |
✗ |
✗ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
✗ |
✗ |
✗ |
Features |
Scope |
Read |
Full-Control |
✗ Access |
Imaging |
All Computers |
✔(view only) |
✔ |
✗ |
Scope based Technicians |
N/A |
N/A |
N/A |
|
Deployment template |
All Computers |
✔(view only) |
✔ |
✗ |
Scope based Technicians |
N/A |
N/A |
N/A |
|
Deployment task |
All Computers |
✔(view only) |
✔ |
✗ |
Scope based Technicians |
N/A |
N/A |
N/A |
|
Instant task |
All Computers |
✔(view only) |
✔ |
✗ |
Scope based Technicians |
N/A |
N/A |
N/A |
|
Standalone Task | All Computers |
✔(view only) | ✔ | ✗ |
Scope based Technicians |
N/A | N/A | N/A | |
Media | All Computers |
✔(view only) | ✔ | ✗ |
Scope based Technicians |
N/A | N/A | N/A | |
USMT | All Computers |
✔(view only) | ✔ | ✗ |
Scope based Technicians |
N/A | N/A | N/A | |
Deployment | All Computers |
✔(view only) | ✔ | ✗ |
Scope Based Technicians |
N/A | N/A | N/A | |
Post Deployment | All Computers |
✔(view only) | ✔ | ✗ |
Scope Based Technicians |
N/A | N/A | N/A | |
Remote Office | All Computers |
✔(view only) | ✔ | ✗ |
Scope Based Technicians |
N/A | N/A | N/A |
Features |
Scope |
Read |
Write |
Full-Control |
Create App Group |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Modify App Group |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Delete App Group |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
View App Group |
All Computers |
✔(view only) |
✔ (view only) |
✔ |
Scope based Technicians |
(view only) |
✔ |
✔ |
|
Create Custom Group |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Associate Policy |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Modify Associated Policy |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Delete Associated Policy |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
View Associated Policy |
All Computers |
✔(view only) |
✔(view only) |
✔ |
Scope based Technicians |
✔(view only) |
✔ |
✔ |
|
Create Temporary Access |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Modify Temporary Access |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Delete Temporary Access |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
View Temporary Access |
All Computers |
✔(view only) |
✔(view only) |
✔ |
Scope based Technicians |
✔(view only) |
✔(view only) |
✔ |
|
Create Privilege Group |
All Computers
|
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Modify Privilege Group |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
View Privilege Group |
All Computers |
✔(view only) |
✔ (view only) |
✔ |
Scope based Technicians |
✔(view only) |
✔ (view only) |
✔ |
|
Save Manage Exclusion Policy |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
View Manage Exclusion Policy |
All Computers |
✔(view only) |
✔ (view only) |
✔ |
Scope based Technicians |
✔(view only) |
✔ (view only) |
✔ |
|
Remove Local admin |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
View Local admin |
All Computers |
✔(view only) |
✔ (view only) |
✔ |
Scope based Technicians |
✔(view only) |
✔ (view only) |
✔ |
Features |
Scope |
Read |
Write |
Full-Control |
Create/duplicate policy |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Publish policy |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✗ |
|
Modify policy |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
View policy |
All Computers |
✔(view only) |
✔(view only) |
✔ |
Scope based Technicians |
✔(view only) |
✔(view only) |
✔ |
|
Decline/Trash/Restore/ Delete policy |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Create Custom Group |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Deploy Policy |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Modify deploy Policy |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
View deploy Policy |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Create/duplicate Trusted Device |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Publish Trusted Device |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Modify/Restore/Delete Trusted Device |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
View Trusted Device |
All Computers |
✔(View only) |
✔(View only) |
✔ |
Scope based Technicians |
✔(View only) |
✔ (View only) |
✔ |
|
Create Temporary Access |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Publish Temporary Access |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Modify Temporary Access |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
View Temporary Access |
All Computers |
✔ |
✔ |
✔ |
Scope based Technicians |
✔ |
✔ |
✔ |
|
Decline/Revoke/Delete Temporary Access |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Save Audit settings |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Extension grouping |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
Features |
Scope |
Read |
Write |
Full-Control |
Create/duplicate policy |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Publish policy |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Modify policy |
All Computers |
✗ |
✔ |
✔ |
Scope based Technicians |
✗ |
✔ |
✔ |
|
Decline/Delete/Restore policy |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Create Custom Group |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Deploy Policy |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
Modify deploy Policy |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
View deployment Policy |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
List Recovery Key |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
✔ |
|
On-demand action |
All Computers |
✗ |
✗ |
✔ |
Scope based Technicians |
✗ |
✗ |
q
✔ |