Dell EMC OpenManage Enterprise Version 3.3.1 User's Guide

PDF

OpenManage Enterprise user role types

NOTE:

AD and LDAP directory users can be imported and assigned one of the OpenManage Enterprise roles (Admin, DeviceManager, or Viewer).
Actions run on the devices require a privileged account on the device.

Table 1. OpenManage Enterprise User role typesThis table lists the OpenManage Enterprise user role types and privileges granted to them.
User with this role...	Has the following user privileges
Administrator	Has full access to all the tasks that can be performed on the console. Full access (by using GUI and REST) to read, view, create, edit, delete, export, and remove information related to devices and groups monitored by OpenManage Enterprise. Can create local, Microsoft Active Directory (AD), and LDAP users and assign suitable roles Enable and disable users Modify the roles of existing users Delete the users Change the user password
Device Manager (DM)	Run tasks, policies, and other actions on the devices assigned by the administrator. Cannot delete or modify any groups. NOTE: Users with Device Manager (DM) privileges cannot be assigned groups.
Viewer	Can only view information displayed on OpenManage Enterprise and run reports. By default, has read-only access to the console and all groups. Cannot run tasks or create and manage policies.

NOTE:

If a Viewer or DM is changed to an Administrator, they get the full Administrator privileges. If a Viewer is changed to a DM, the Viewer gets the privileges of a DM.
Any change to the user role takes effect immediately and the impacted user(s) will be logged out of their active session.
An audit log is recorded when:
- A group is assigned or access permission is changed.
- User role is modified.