Novell ZENWORKS PATCH MANAGEMENT 6.4 SP2 - SERVER, User Manual

Page: 239 / 390

M
ANAGING
U
SERS AND
R
OLES
- 223 -
Defining Roles
The Patch Management Server includes both system and custom roles. System roles are
roles native to every installation and cannot be edited or disabled. They allow control over
all device groups and devices. Custom roles are created by the administrator and allow for
combining access rights and selected devices or groups for a particular user.
note: See Defining Access Rights on page 224 for detailed descriptions of the access rights
assigned each role.
Roles are defined by a combination of three attributes; access rights, groups and devices.
• Access rights define the application pages and functionality available to the user.
• Groups and Devices define the specific machines or group of machines the user has
permission to access.
Defining the Predefined System Roles
Predefined system roles are provided to assist you in defining the roles that newly created
users inherit. The ZENworks Patch Management administrator can assign these roles to the
user, or may use a predefined role as a model in defining a custom role.
NOTE
: System roles provide access to all groups and devices. A user assigned a system role
has access to all devices and groups.
There are four system roles: Administrator, Manager, Operator, and Guest.
Role Description
Administrator Any user assigned this role is permitted full access to all areas and
functionality of the product. Users assigned this role are the only users
who can delegate newly installed devices to other user roles. The
administrator role includes all available access rights. Administrators
can view all devices/groups and perform any function within the Patch
Management Server environment. There must be at least one user
assigned the administrator user role.
Manager Users assigned this role can manage every section of the Patch
Management Server system with the exception of Advanced
Configuration and User Management options.