6.1 Assigning Rights

6.1.1 Assigning Super Administrator Rights

A Super Administrator has rights to perform all administrative tasks. For more information about all of the rights that a Super Administrator has, see Section 7.0, Rights Descriptions. When you grant an administrator Super Administrator rights, all other assigned rights are overridden.

Super Administrator rights can be assigned only to administrator accounts. They cannot be assigned to administrator groups or roles.

  1. In ZENworks Control Center, click the Administrators tab.

  2. In the Administrators panel, click the name of the administrator to whom you want to assign Super Administrator rights.

  3. Click the Rights tab.

  4. In the General panel, select the Super Administrator check box.

  5. Click Apply.

6.1.2 Assigning Rights to Administrators and Administrator Groups

This section explains how to assign all rights other than Inventory Report Rights and Asset Management Report Rights to administrators and administrator groups. For information about assigning Inventory Report rights, see Section 6.1.4, Assigning Inventory Report Rights to Administrators and Administrator Groups. For information about assigning Asset Management Report rights, see Section 6.1.5, Assigning Asset Management Report Rights to Administrators and Administrator Groups.

  1. In ZENworks Control Center, click the Administrators tab.

  2. In the Administrators panel, click the name of the administrator or administrator group to which you want to assign rights.

  3. Click the Rights tab.

  4. In the Assigned Rights panel, click Add, then select the rights you want to assign.

    For example, if you want to assign rights for device tasks, select Device Rights.

  5. Configure the following settings:

    Contexts: The contexts determine where the rights are applied. Some rights apply to the entire Management Zone, in which case Zone is displayed in the Contexts box and you cannot change it. Otherwise, you need to add each context to which you want the rights to apply.

    Privileges: Each privilege, or task, has a rights setting associated with it. Click Allow to enable the privilege or click Deny to disable the privilege. For more information about right’s privileges, see Section 7.0, Rights Descriptions.

  6. Click OK to add the rights to the Assigned Rights panel.

  7. Click Apply to save the changes to the administrator or administrator group.

You can also use the admin-rights-set command in zman to assign rights for an administrator account. For more information, see Administrator Commands in the ZENworks 11 SP4 Command Line Utilities Reference.

6.1.3 Assigning Rights to Administrator Roles

  1. In ZENworks Control Center, click the Administrators tab.

  2. In the Roles panel, click the name of the role to which you want to assign rights.

  3. In the Rights panel, click Add, then select the rights you want to assign.

    For example, if you want to assign rights for device tasks, select Device Rights.

  4. For each privilege, click Allow to enable the privilege, Deny to disable the privilege, or Unset to not configure the privilege.

    If you select Unset, the privilege is not applied (denied or allowed) unless it is set elsewhere in ZENworks (for example, on an administrator account, an administrator group, or another role). For more information about the right’s privileges, see Section 7.0, Rights Descriptions.

    NOTE:You do not configure the contexts to which the rights apply until you assign the role to an administrator or administrator group. This allows you to use the same role for administrators requiring the role in different contexts. For information about assigning roles, see Section 5.2, Assigning Roles.

  5. Click OK.

  6. Click Apply to save the changes to the administrator role.

You can also use the role-rights-set command in zman to assign rights to an administrator role. For more information, see Role Commands in the ZENworks 11 SP4 Command Line Utilities Reference.

6.1.4 Assigning Inventory Report Rights to Administrators and Administrator Groups

This section explains how to assign Inventory Report rights to administrators and administrator groups. Inventory Report rights control an administrator’s rights to edit and run the standard and custom inventory reports. These are the reports located on the Reports tab in ZENworks Control Center.

For information about assigning Asset Management Report rights, see Section 6.1.5, Assigning Asset Management Report Rights to Administrators and Administrator Groups. For information about assigning all other rights, see Section 6.1.2, Assigning Rights to Administrators and Administrator Groups.

By default, each administrator receives rights to view and run all of the inventory reports. You can increase the rights to enable the administrator to also create and delete reports. Or, you can remove the rights to prevent the administrator from even seeing the reports.

  1. In ZENworks Control Center, click the Administrators tab.

  2. In the Administrators panel, click the name of the administrator or administrator group whose Inventory Reports rights assignments you want to modify.

  3. Click the Rights tab.

  4. In the Administrator Tasks panel, click Inventory Report Rights.

    The Inventory Report Rights panel lists the folders that contain the custom and standard inventory reports. The report rights are set at the folder level.

  5. Select the check box next to the folder containing the reports for which you want to modify the administrator’s rights.

  6. Click Edit, then select the rights you want to assign:

    • Remove All Rights: Removes all rights to the folder and its reports.

    • Assign View/Execute Rights: Allows the administrator to view and execute the folder’s report, but not to edit, move, or delete the reports.

    • Assign Full Rights: Gives the administrator rights to create, edit, move, and delete reports. For standard reports, this setting is the same as View/Execute, because you cannot alter a standard report.

    The changes to the rights are saved immediately.

For more information, see Section 7.24, Inventory Report Rights.

6.1.5 Assigning Asset Management Report Rights to Administrators and Administrator Groups

This section explains how to assign Asset Management Report rights to administrators and administrator groups. Asset Management Report rights control an administrator’s rights to edit and run the standard and custom Asset Management reports. These are the reports located on the Asset Management Reports tab in ZENworks Control Center.

For information about assigning Inventory Report rights, see Section 6.1.4, Assigning Inventory Report Rights to Administrators and Administrator Groups. For information about assigning all other rights, see Section 6.1.2, Assigning Rights to Administrators and Administrator Groups.

By default, each administrator receives rights to view and run all of the Asset Management reports. You can increase the rights to enable the administrator to also create and delete reports. Or, you can remove the rights to prevent the administrator from even seeing the reports.

  1. In ZENworks Control Center, click the Administrators tab.

  2. In the Administrators panel, click the name of the administrator or administrator group whose Inventory Reports rights assignments you want to modify.

  3. Click the Rights tab.

  4. In the Administrator Tasks panel, click Asset Management Report Rights.

    The Asset Management Report Rights panel lists the folders that contain the custom and standard inventory reports, as well as the source for the folders. The report rights are set at the folder level.

  5. Select the check box next to the folder containing the reports for which you want to modify the administrator’s rights.

  6. Click Edit, then select the rights you want to assign:

    • Remove All Rights: Removes all rights to the folder and its reports.

    • Assign View/Execute Rights: Allows the administrator to view and execute the folder’s report, but not to edit, move, or delete the reports.

    • Assign Full Rights: Gives the administrator rights to create, edit, move, and delete reports. For standard reports, this setting is the same as View/Execute, because you cannot alter a standard report.

    The changes to the rights are saved immediately.

For more information, see Section 7.25, Asset Management Report Rights.