Installer administrator

This scenario describes the security settings to be defined for an administrator who only executes agent rollouts across the network.

1. Log on to the console with a superadministrator login.
2. Then go to the Global Settings and the Administrator Groups node.
3. Create a new group called Installer .
4. Select the following Security Profile node and in the Capabilities tab.
5. Click the Edit > Properties menu item.

1. In the Modify Capabilities tab select the following capabilities:
   • All Modify Capabilities capabilities
   • All Device capabilities
   • View and Manage Device Groups capabilities - no Populate capability
2. Click OK to confirm and close the window.
3. Then go to the Static Objects tab and via the Properties pop-up window add the following static objects:
   • Device Groups top node with Read and Assign Access: Allow and Write Access: Deny
   • Rollouts top node with Read, Write and Assign Access: Allow

4. In the Dynamic Objects tab add the following dynamic objects via the Properties pop-up window:

   • All Devices and All Device Groups queries with Read Access: Allow and Write and Assign Access: Deny
   • All Rollout Folders and All Rollouts queries with Read, Write and Assign Access: Allow.

   These queries can be found in the BMC Client Management database folder.