7.14 Patch Management Rights - Zone

Patch Management rights are configurable at two levels: zone and device. The zone-level Patch Management rights control the operations that are available on the Patch Management page and on device objects, while the device-level Patch Management rights (see Section 7.13, Patch Management Rights - Device) control only the operations available on device objects.

The following zone-level Patch Management rights are available:

RIGHT

OPERATIONS CONTROLLED BY THE RIGHT

NOTES

Patch Deploy

  • Deploy a patch to a device

  • Deploy a patch to a device group

  • Deploy a patch to a device folder

An administrator must have this right and Bundle Rights for the patch bundle being deployed.

Patch Enable

  • Enable a patch to be deployed

 

Patch Disable

  • Disable a patch so it can’t be deployed

 

Patch Update Cache

  • Update a patch in the ZENworks Server cache by downloading the patch from the subscription service

 

Assign a Baseline

  • Assign a patch to a device group’s mandatory baseline of patches

 

Remove from Baseline

  • Remove a patch from a device group’s mandatory baseline of patches

 

View Patch Details

  • View information for a patch that is listed in a device’s Patches list

 

Export Patch

  • Export patch information to a CSV file for one or more patches selected from a device’s Patches list

 

Scan Now

  • Initiate a patch detection scan (DAU task) on devices

 

Remove Patch

  • Remove a patch from a device

 

Recalculate Baseline

  • Initiate an immediate check of all devices in a device group to evaluate baseline patch compliance and apply the required baseline patches if necessary

 

Configure

  • Configure the Patch Management zone settings (Configuration > Management Zone Settings > Patch Management)

 

Update Dashboard

  • Update the Patch Management dashboard report (Patch Management > Dashboard > Update Dashboard Report)

 

New Bundles

  • Create a new patch bundle

  • Delete a patch bundle

 

Patch Policy

  • Create a patch policy

  • Rename a patch policy

  • Copy a patch policy to create a new patch policy

  • Delete a patch policy

  • Assign a patch policy to devices, device groups, and device folders

  • Enable and disable a patch policy

  • Publish a patch policy