Dell EMC OpenManage Essentials Version 2.5 User's Guide

Managing Device Group Permissions

The Device Group Permissions portal allows OmeAdministrators to grant users the permission to perform system updates and run remote tasks on select device groups.

Using the Device Group Permissions portal, OmeAdministrators can:
  • Add users to the OmeSiteAdministrators role.
  • Assign device groups to each user in the OmeSiteAdministrators role, allowing the user to perform system updates and run remote tasks on only the assigned device groups.
  • NOTE: To effectively manage device group permissions, it is recommended that a member of the OmeSiteAdministrators role is removed from the OmeAdministrators and OmePowerUsers roles.
  • NOTE: If a device group is not assigned to a user, it only restricts the user from performing system updates or running remote tasks on that device group. It does not hide or remove that device group from the device tree in the Devices portal.

The Common Tasks pane displays the Edit Members of OmeSiteAdministrators option that can be used to add or remove users from the OmeSiteAdministrators role.

The Manage Device Group Permissions pane displays the OmeSiteAdministrators in a tree-view format. If you select OmeSiteAdministrators at the root of the tree-view, the User Overviews are displayed in the right-side pane. If you select a user in the OmeSiteAdministrators tree-view, the right-side pane displays the user name and the Device Groups for Tasks and Patch Targeting section.

  • NOTE: An OmeSiteAdministrators task target remains ‘as is’ when the task was created. If the OmeAdministrators change the OmeSiteAdministrators device group permissions, the task targets are not modified. Changing an OmeSiteAdministrators device group permissions does not change tasks the OmeSiteAdministrators created earlier.
  • NOTE: Only Server, RAC, or custom device groups that are assigned to OmeSiteAdministrators are available to OmeSiteAdministrators for remote or system update tasks. To make any other device groups available to the OmeSiteAdministrators for remote or system update tasks, you must create a custom device group which includes other device groups and assign it to the OmeSiteAdministrators.
  • NOTE: If a user in the OmeSiteAdministrators role is removed from the Windows user groups, the user is not removed from the OmeSiteAdministrators role automatically. You must remove the user from the OmeSiteAdministrators role manually through the Edit Members of OmeSiteAdministrators option.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\