We are using SEPM 12 RU4a.

How do I create a limited admiminstrator account such that

* person has control over their group

* person can push installation package or communication package to computers they specify

So far, I checked Manage groups and Remotely run commands, but I don't know what else to check. I want to give only the necessary rights:

I believe also manage installation packages. That should be enough.

The Clients and Admin pages will be the only ones they can access.

http://www.symantec.com/docs/HOWTO81226

click on manage package

About administrator account roles and access rights (Endpoint Protection 12.1.2)

http://www.symantec.com/business/support/index?page=content&id=HOWTO81226

But I want the users to be able to access common tasks so they can deploy a client or communications setting

If I select Manage installation package all I get is "Install Packages"

I have the same config as you and I have more options than what I see for you. What version of SEPM?

They can still use the migration and deployment wizard from start  - all programs and not within the console

Edit# forgot @@ :)  thats not in 12.1

they need to use clientremote.exe

D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\bin

this can push only the package and not sylink.xml

We are running SEPM 12 RU4a

We have engineers at different sites and they can only access the Java version of the SEPM console