System Center 2012 Configuration Manager Unleashed

Role-Based Administration

A much-needed shift in managing security is introduced in this version of ConfigMgr. Role-based administration looks at security and permissions as roles instead of the confusing and complicated use of class and instance rights. By using a combination of security roles and security scopes, you can apply permissions to groups of securable objects by assigning the role to a collection that holds these objects. Because security is available throughout the hierarchy, an administrator with an assigned role can connect their console to any site and expect to receive the same set of permissions assigned to them no matter which site they are in. See Chapter 20 for additional information.