ZCM Device Modify rights does not allow device retirement when not Administrator or Super Administrator

  • 7007225
  • 17-Nov-2010
  • 23-Jul-2012

Environment

Novell ZENworks 10 Configuration Management with Support Pack 3 - 10.3
Novell ZENworks 11 Configuration Management

Situation

Configure for a User or Role with the following Device Rights :

Allow Modify
Allow Create/Delete
Allow Modify Groups
Deny Create / Delete Groups
Allow Modify Group Membership
Allow Modify Folders
Deny Create / Delete Folders
Allow Modify Settings
Deny Assign Policies
Deny Assign Bundles
 
or even:
 

Allow Modify
Allow Create/Delete
Allow Modify Groups
Allow Create / Delete Groups
Allow Modify Group Membership
Allow Modify Folders
Allow Create / Delete Folders
Allow Modify Settings
Allow Assign Policies
Allow Assign Bundles

The non-Administrator or non-Super Administrator User(s) and members of the Role with Device Modify rights are not able to retire a device.

Resolution

This is fixed in version 11.2.1 - see KB 7010042 "ZENworks Configuration Management 11.2.1 - update information and list of fixes" which can be found at https://support.microfocus.com/kb/doc.php?id=7010042
 
Workaround is to use the Administrator or Super Administrator user accounts to retire a device.

Additional Information

Both ZCM 10 and 11 documentation ('Discovery, Deployment, and Retirement Reference' > Chapter: 'Retiring or Unretiring Devices' ) state: 

'To retire or unretire a device, you must have Device Modify rights.'