Client Management Suite

Hi,

I've created a "Support" role with privileges to run tasks, reports, pcAnywhere... for our helpdesk staff.

There are only 2 privileges I can't figure out how to assign to this role:

* Push Symantec Management Agent (Actions > Push Symantec Agent )

* See all software (manage > software remains blanc)

In order for Support staff to be able to log in to the console I also had to add their group to the "Symantec Guests" group. There doesn't seem to be a checkbox for "console access".

What am I overlooking?

-Walter-

Along with priveleges you also need to provide the user with the permission to view the pages u want to provie acces to.....Hope this helps

What happens if they try to do Actions > Push Symantec Management Agent?

What about if they go to Manage > Software?  What error messages appear for these two, if any?

When they navigate to "Actions > Push Symatnec Management Agent" they a "you don't have the required permissions to view this page" message

If they go to manage > software the page opens but no software is shown (everything remains blanc).

I also noticed I had to make my "support staff" role member of the "Altiris Guests" role in order for them to be able to log into the Altiris Web console. I also couldn't figure out what permissions needs to be set to be able to login to the console.

Actions fall under the Console Menu view. 

 My helpdesk group I wanted to be able to push the agent only has read here. I may have to add write for them here in order for them to be able to push the agent.

 In the mean time I added non-inherited "Read Permissions" to their inherited "Read." (They are two different items in the Actions view.) I'll check in with them Monday to see if it worked.

Open Security Role Manager ( Settings > Security > Permissions)
 Role : Select the role to manage

Change View to Settings    

  Drill down to Symantec Management Agent Install
 
 Select Advanced.  View the role that is able to push agent.  They probably have full control.
A role that I want to be able to push the agent only has read & write.  They should be able to push but cant right? Look at the parent directory of the Agent Install and view permissions there.
 For example, the child SMA-install falls under  parent Symantec Management Agent, notice the account that can't push probably doesnt even have read permissions there.  You'll have to modify & test appropriately.

Thanks for the comments. I'll be trying this next week and posts my results back.

Mine said they were finally able to push the agent with the settings I changed.

thanks burndtjammer, that worked! Another thing learned.