Level 1 Worker with enabled required privileges and permissions can’t create Quick Delivery task or Managed Delivery Policy

Article:TECH195077  |  Created: 2012-08-16  |  Updated: 2013-10-21  |  Article URL http://www.symantec.com/docs/TECH195077
Article Type
Technical Solution


Issue



Level 1 Worker with enabled required privileges and permissions can’t create Quick Delivery task or Managed Delivery Policy.


Environment



Software Management 7.1, 7.5


Cause



Security is not configured correctly.


Solution



Currently the correct set of privileges/permissions for Symantec Level 1 Worker user for creating Managed Delivery Policy and Quick Delivery Task looks this way:
 

  1. In Account Management > Roles page > Symantec Level 1 Workers > Privileges tab are enabled:
    1. all privileges under ‘Management Privileges’
    2. “Create Software Deliveries” privilege under ‘Software Management’
    3. “Managed Software Delivery” and “Quick Delivery Task” privileges  under second ‘Right Click Menu – Actions’
  2. In Security Role Manager > Symantec Level 1 Worker (for 7.5 see below section for alternate steps) 
    1. Enable  “Read/Write” permissions for Policies folder
    2. Enable  “Read/Write” permissions for Tasks folder
    3. Enable  “Read/Write” permissions for Resource Management folder
    4. Click Edit button to add more settings.  In Items Selector window:
      1. Select ‘Managed Delivery Settings’ under Settings > Software folder.
      2. Select ‘Inventory Rule’ under Settings > Notification Server > Resource and Data Class Settings > Data Classes > Inventory Rule Management
      3. Select ‘Command Line Requires Package’ under Settings > Notification Server > Resource and Data Class Settings > Resource Associations > Software Management
      4. Click Save Changes to add selected items.
    5. Enable  ‘Read’ and ‘Read Resource Data’ permissions for added ‘Inventory Rule’ item located under Settings > Notification Server > Resource and Data Class Settings > Data Classes > Inventory Rule Management folder
    6. Enable ‘Read’ and ‘Read Resource Data’ permissions for ‘Software Component’ item located under Settings > Notification Server > Resource and Data Class Settings > Data Classes > Software Management folder
    7. Ensure that ‘Read’ permission is enabled for ‘Command Line Requires Package’ item located under  Settings > Notification Server > Resource and Data Class Settings > Resource Associations > Software Management folder

For 7.5, section 2 should be followed as shown:
2. In Security Role Manager > Symantec Level 1 Worker
      a. Enable  “Read/Write” permissions for Policies folder
      b. Enable  “Read/Write” permissions for Tasks folder
      c. Enable  “Read/Write” permissions for Resource Management folder
      d. Select ‘Settings’ view and click Add button to add more settings.  In
         ‘Add Permission’ window:
         i. Select ‘Managed Delivery Settings’ under Settings > Software folder.
         ii. Select ‘Inventory Rule’ under Settings > Notification Server > Resource and Data Class Settings > Data Classes > Inventory Rule Management.
         iii. Click Ok to add the selected items.
      e. Enable  ‘Read’ and ‘Read Resource Data’ permissions for added ‘Inventory Rule’ item located under Settings > Notification Server > Resource and Data Class Settings > Data Classes > Inventory Rule Management folder
      f. Ensure that ‘Read’ and ‘Read Resource Data’ permissions are enabled for ‘Software Component’ item located under Settings > Notification Server > Resource and Data Class Settings > Data Classes > Software Management folder
      g. Ensure that ‘Read’ permission is enabled for ‘Command Line Requires Package’ item located under  Settings > Notification Server > Resource and Data Class Settings > Resource Associations > Software Management folder

With all that enabled privileges and permissions Symantec Level 1 Worker  can create Managed Delivery policy via:

  • Wizard launched from Actions > Software > Managed Software Delivery…
  • Via right click menu on software in Software view > Actions > Managed Software Delivery.
  • Via drag’n’dropping a software onto selected computer. Need to enable “Ensure software stays installed using a policy” checkbox in ‘Deliver Software’ window appeared after drag’n’drop.

            

With all that enabled privileges and permissions Symantec Level 1 Worker can create Quick Delivery Task via:

  • Wizard launched from Actions > Software > Software Delivery Task…
  • Via right click menu on software in Software view > Actions > Quick Delivery Task
  • Via drag’n’dropping a software onto selected computer. Need to leave disabled “Ensure software stays installed using a policy” checkbox in ‘Deliver Software’ window appeared after drag’n’drop.


Note: Creating Managed Delivery policy and Quick Delivery Task is not available via right click menu on Polices/ Tasks folder in Polices and Jobs/Tasks view.  There is no ‘New’ context menu item and this is applicable  for any folder in Policies and Tasks trees in Polices and Jobs/Tasks view.


Supplemental Materials

SourceETrack
Value2885017, 2884957


Article URL http://www.symantec.com/docs/TECH195077


Terms of use for this information are found in Legal Notices