7.3 Bundle Rights

The Bundle Rights dialog box lets you control the bundle operations that the selected administrator can perform.

7.3.1 Contexts

Specify the Bundle folders (contexts) that you want the administrator’s Bundle rights to apply to. To select a folder, click Add to display the Contexts dialog box, browse for and select the folder (or multiple folders), then click OK. The rights also apply to the folder’s subfolders.

7.3.2 Privileges

The Privileges section lets you grant the selected administrator rights to create or modify bundles, groups, and folders listed in the Contexts section.

The following rights are available:

RIGHT	OPERATIONS CONTROLLED BY THE RIGHT	NOTES
View Leaf	View the contents in the specified context (folder and subfolders)	Setting the View Leaf right to Deny forces all other Bundle rights to Deny. The View Leaf right must be set to Allow to perform any other bundle operations.
Modify Groups	Rename a bundle group Change a bundle group’s description
Create/Delete Groups	Create a bundle group Delete a bundle group Move a bundle group	Setting the Create/Delete Groups right to Allow forces the Modify Groups right to Allow. This means that an administrator who creates a group also receives rights to modify it.
Modify Group Membership	Add bundles to a group Remove bundles from a group Reorder bundles within a group
Modify Folders	Rename a bundle folder Change a bundle folder’s description
Create/Delete Folders	Create a bundle folder Delete a bundle folder Move a bundle folder	Setting the Create/Delete Folders right to Allow forces the Modify Folders right to Allow. This means that an administrator who creates a folder also receives rights to modify it.
Author	Create a bundle (Sandbox version) For Sandbox bundles: Edit settings on a bundle’s Summary tab Edit settings on a bundle’s Requirements tab Edit settings on a bundle’s Actions tab Rename a bundle Move a bundle from one folder to another Copy system requirements from one bundle to another Delete a bundle Enable/disable a bundle Publish (copy) a bundle to a new bundle (Sandbox version)
Publish	Publish a bundle as a new version or a new bundle Edit settings on a bundle’s Summary tab Edit settings on a bundle’s Requirements tab Edit settings on a bundle’s Actions tab Rename a bundle Move a bundle from one folder to another Copy system requirements from one bundle to another Delete a bundle Enable/disable a bundle Publish (copy) a bundle to a new bundle (Sandbox version)	Setting the Publish right to Allow forces the Author right to Allow. This means that an administrator who can publish bundles can also author bundles.
Modify Settings	Edit settings on a bundle’s Settings tab with the following exception: Cannot create or add system variables (System Variables setting) on bundles	This right applies to bundles and bundle folders. It does not apply to bundle groups because bundle groups do not have a Settings tab.
Assign Bundles	Assign bundles to devices, device groups, and device folders Assign bundle groups to devices, device groups, and device folders Assign bundles to users, user groups, and user folders Assign bundle groups to users, user groups, and user folders Remove bundle assignments from the objects listed above Remove bundle group assignments from the objects listed above	To assign bundles to devices, groups, and folders, an administrator needs this right and the Device Rights – Assign Bundles right. In other words, the administrator needs Assign Bundle rights for the bundle and the device to which the bundle is being assigned. To assign bundles to users, groups, and folders, an administrator needs this right and the User Rights – Assign Bundles right. In other words, the administrator needs Assign Bundle rights for the bundle and the user to which the bundle is being assigned.
View Audit Log	View a bundle’s Audit tab and the events logged to that tab View a bundle group’s Audit tab and the events logged to that tab View a bundle folder’s Audit tab and the events logged to that tab	This right does not allow the administrator to view event details. To view event details, the administrator must have the View Audit Event right.
View Audit Events	View a bundle’s Audit tab, the events logged to that tab, and the details for the events View a bundle group’s Audit tab, the events logged to that tab, and the details for the events View a bundle folder’s Audit tab, the events logged to that tab, and the details for the events	Setting the View Audit Events right to Allow forces the View Audit Log right to Allow.