What are the Patch Management Administrator Role Permission Settings for PMS 6.2 Sp1?

Answer

1. Check the permissions for the Patch Management Administrator role:

Configuration tab > Server Settings > Notification Server Settings > Security Role Management

At a minimum, the Patch Management Role will need the following permissions:

Enable Software Bulletin

Distribute Software Update

View Resources tab

View Configuration tab

View Reports tab

View Tasks tab

            Note: If the list presented above does not provide sufficient privileges, please go to KB 49711 
 

2. Give Read permissions to the root folder of each tab.

Role based security in Step 1 defines permissions for the Patch Management Administrator role, but users of the role will not be able to see any items under the various tabs until read permissions are granter for each tab. For the root folder in each tab listed in the previous step, right-click on the folder, select properties, and navigate to the Security tab. For example, under the Reports tab, you will view the properties of the Reports folder. If the Patch Management Administrator role does not exist with at least read permissions, click the Add button, select the Patch Management Administrator role, and give the role Read permissions (under Altiris System Permissions). Apply the changes when finished.

3. Additional Privileges for the Configuration tab

Right-click and choose properties on the folder found at Configuration > Resource Settings > Data Classes > Software Management.

If you see the Patch Management Administrator, highlight it and click Edit. If you don’t see the Patch Management Administrator role in the list, you need to add it before modifying. If you are unable to modify these roles, you should uncheck the inherit permissions and click Copy on the next dialog box. After you are in the modify permissions area for the Patch Management Administrator role, you need to give the Patch Management Administrator role full control. Apply the changes when finished.

Right-click and choose properties on the folder found at Configuration > Resource Settings > Data Classes > Inventory Rule Management.

If you see the Patch Management Administrator, highlight it and click Edit. If you don’t see the Patch Management Administrator role in the list, you need to add it before modifying. If you are unable to modify these roles, you should uncheck the inherit permissions and click Copy on the next dialog box. After you are in the modify permissions area for the Patch Management Administrator role, you need to give the Patch Management Administrator role full control. Apply the changes when finished.

4. Additional Privileges for the Reports tab

Right-click and choose properties on the folder found at Reports > Software Management > Patch Management.

If you see the Patch Management Administrator, highlight it and click Edit. If you don’t see the Patch Management Administrator role in the list, you need to add it before modifying. If you are unable to modify these roles, you should uncheck the inherit permissions and click Copy on the next dialog box. After you are in the modify permissions area for the Patch Management Administrator role, you need to give the Patch Management Administrator role full control. Apply the changes when finished.

Right-click and choose properties on the folder found at Reports > Notification Server Infrastructure > Server > Resource Reports.

If you see the Patch Management Administrator, highlight it and click Edit. If you don’t see the Patch Management Administrator role in the list, you need to add it before modifying. If you are unable to modify these roles, you should uncheck the inherit permissions and click Copy on the next dialog box. After you are in the modify permissions area for the Patch Management Administrator role, you need to give the Patch Management Administrator role the following rights (Apply changes when finished):

Read (under Altiris System Permissions)

Run Report (under Altiris Report Permissions)

5. Additional Privileges for the Resources tab 

Right-click on the Collections Folder >  Properties > Security Tab:

If you see the Patch Management Administrator, highlight it and click Edit. Editing the Patch Management Administrator role; you need to give the Patch Management Administrator role full control. Apply the changes when finished.

Note: If you don’t see the Patch Management Administrator role in the list, you need to add it before modifying.

6. Additional Privileges for the Tasks tab

Right-click and choose properties on the folder found at Tasks >Software Management > Patch Management.

If you see the Patch Management Administrator, highlight it and click Modify. If you don’t see the Patch Management Administrator role in the list, you need to add it before modifying. If you are unable to modify these roles, you should uncheck the inherit permissions and click Copy on the next dialog box. After you are in the modify permissions area for the Patch Management Administrator role, you need to give the Patch Management Administrator role full control. Apply the changes when finished.