Altiris Deployment Solution™ from Symantec User’s Guide
92
3. Type the maximum number of computers that each job can be scheduled on.
4. Check the box if you want this user to be able to schedule jobs to run immediately.
5. Click
OK
to save your changes.
Setting permissions
Set permissions for jobs, job folders, computers, and computer groups. See
Best
practices for Deployment Solution security
on page 87 for additional design tips.
Setting permissions
1. Right-click on a computer group or job folder (or individual computers and jobs) and
select
Permissions
. The
Object Security
dialog appears.
2. Click the
Groups
tab and select a group name. Or click the
User
tab and select a
user name.
3. From the list in the right pane, select if you want to Accept or Deny permission to
run the operations on the selected computer or job objects. These permissions
include access to remote operations using Deployment Solution and features for
scheduling Deployment tasks. See
Remote operations using Deployment Solution
on
page 122 and
Deployment tasks
on page 155.
4. Select the
Allow
or
Deny
check box to explicitly set security permissions for these
Deployment Solution features for the selected objects.
Note
Administrators have access to all objects with unrestricted rights and permissions.
You cannot explicitly deny permissions to computer or job objects for users with
administrator rights.
5. To assign permissions to multiple groups, click
Set permissions on all child
objects
to assign the values without closing the dialog.
Note
You can set permissions for all jobs and computers by clicking in the
Jobs
pane or
Computers
pane without selecting a job or computer object.
Permission rules
Permissions received through different sources may conflict with each other. The
following permission rules determine which permissions are enforced:
Permissions cannot be used to deny the user with Administrator console rights
access to use any console objects or features.
User permissions take precedence over Group permissions.
Deny
overrides
Allow
. When a user is associated with multiple groups, one
group could be allowed a permission at a particular level while the other group
is denied the same permission. In this scenario, the permission to deny the
privilege is enforced.
Permissions do not flow down an object tree. Instead, the object in question
looks in the current location and up the tree, and uses the first permission it
finds.
