
21
Managing Device Group Permissions
The Device Group Permissions portal allows OmeAdministrators to grant users the permission to perform system
updates and run remote tasks on select device groups.
Using the Device Group Permissions portal, OmeAdministrators can:
• Add users to the OmeSiteAdministrators role.
• Assign device groups to each user in the OmeSiteAdministrators role, allowing the user to perform system
updates and run remote tasks on only the assigned device groups.
NOTE: To effectively manage device group permissions, it is recommended that a member of the
OmeSiteAdministrators role is removed from the OmeAdministrators and OmePowerUsers roles.
NOTE: If a device group is not assigned to a user, it only restricts the user from performing system updates or
running remote tasks on that device group. It does not hide or remove that device group from the device tree in the
Devices portal.
The Common Tasks pane displays the Edit Members of OmeSiteAdministrators option that can be used to add or remove
users from the OmeSiteAdministrators role.
The Manage Device Group Permissions pane displays the OmeSiteAdministrators in a tree-view format. If you select
OmeSiteAdministrators at the root of the tree-view, the User Overviews are displayed in the right-side pane. If you select
a user in the OmeSiteAdministrators tree-view, the right-side pane displays the
user name
and the Device Groups for
Tasks and Patch Targeting section.
NOTE: An OmeSiteAdministrators task target remains ‘as is’ when the task was created. If the OmeAdministrators
change the OmeSiteAdministrators device group permissions, the task targets are not modified. Changing an
OmeSiteAdministrators device group permissions does not change tasks the OmeSiteAdministrators created
earlier.
NOTE: Only Server, RAC, or custom device groups that are assigned to OmeSiteAdministrators are available to
OmeSiteAdministrators for remote or system update tasks. To make any other device groups available to the
OmeSiteAdministrators for remote or system update tasks, you must create a custom device group which includes
other device groups and assign it to the OmeSiteAdministrators.
NOTE: If a user in the OmeSiteAdministrators role is removed from the Windows user groups, the user is not
removed from the
OmeSiteAdministrators role automatically. You must remove the user from the
OmeSiteAdministrators role manually through the Edit Members of OmeSiteAdministrators option.
Related Links
Device Group Permissions
Adding Users to the OmeSiteAdministrators Role
NOTE: Only OmeAdministrators are allowed to add users to the OmeSiteAdministrators role.
NOTE: To effectively manage device group permissions, it is recommended that a member of the
OmeSiteAdministrators role is removed from the OmeAdministrators and OmePowerUsers roles.
195
Kommentare zu diesen Handbüchern