I would like to allow a group of users to view the Jobs and Task and also to run them, but not on a set of computers. How do I do that?
I have already created a security role and added the users I want the restriction on in them. They have permission to read and run tasks. I created a new organizational view and group. I added the computers that should not have any jobs run against them in the new organizational group. That's where I'm stuck. I'm not sure what to do after that.
Edit: I'm surprised I was able to figure this out on my own. The part where I added the computers to the new OG where the tasks/job should not run on was wrong. I should have done the opposite. So add all the other computers in your organization, but exclude the computer that you do not want any tasks/jobs run on them. Set the permission to this OG to have all of the Task Server Permissions. Now there's a problem.....now you can't search the excluded computers cause they don't exist in the new OG. So you'll have to add a resource that has them. I added the Default > All Resources > Asset > Network Resource > Computer. I only set the System Permission to Read. Doing this the tech can still view information about the excluded computers. To make this dynamic, you'll need to make an Automation Policies that links to a filter.