How to allow "Push Altiris Agent" privileges
Updated: 13 Feb 2012 | 8 comments
This issue has been solved. See solution.
Hi,
I've created a "Support" role with privileges to run tasks, reports, pcAnywhere... for our helpdesk staff.
There are only 2 privileges I can't figure out how to assign to this role:
* Push Symantec Management Agent (Actions > Push Symantec Agent )
* See all software (manage > software remains blanc)
In order for Support staff to be able to log in to the console I also had to add their group to the "Symantec Guests" group. There doesn't seem to be a checkbox for "console access".
What am I overlooking?
-Walter-
Discussion Filed Under:
Comments
Overlooking permissions
Along with priveleges you also need to provide the user with the permission to view the pages u want to provie acces to.....Hope this helps
What happens for those two items?
What happens if they try to do Actions > Push Symantec Management Agent?
What about if they go to Manage > Software? What error messages appear for these two, if any?
Mike Clemson, Senior Systems Engineer
Intuitive Technology Group -- Symantec Platinum Partner
When they navigate to
When they navigate to "Actions > Push Symatnec Management Agent" they a "you don't have the required permissions to view this page" message
If they go to manage > software the page opens but no software is shown (everything remains blanc).
I also noticed I had to make my "support staff" role member of the "Altiris Guests" role in order for them to be able to log into the Altiris Web console. I also couldn't figure out what permissions needs to be set to be able to login to the console.
Edit their Security Role in Security Role Manager
Open Security Role Manager ( Settings > Security > Permissions)
Role : Select the role to manage
Change View to Settings
Drill down to Symantec Management Agent Install
Select Advanced. View the role that is able to push agent. They probably have full control.
A role that I want to be able to push the agent only has read & write. They should be able to push but cant right? Look at the parent directory of the Agent Install and view permissions there.
For example, the child SMA-install falls under parent Symantec Management Agent, notice the account that can't push probably doesnt even have read permissions there. You'll have to modify & test appropriately.
more
Actions fall under the Console Menu view.
My helpdesk group I wanted to be able to push the agent only has read here. I may have to add write for them here in order for them to be able to push the agent.
In the mean time I added non-inherited "Read Permissions" to their inherited "Read." (They are two different items in the Actions view.) I'll check in with them Monday to see if it worked.
Mine said they were finally
Mine said they were finally able to push the agent with the settings I changed.
Thanks for the comments. I'll
Thanks for the comments. I'll be trying this next week and posts my results back.
thanks burndtjammer,
thanks burndtjammer, that worked! Another thing learned.
Would you like to reply?
Login or Register to post your comment.