Operations Associated with User Role Profiles
Updated: May 13, 2016
Applies To: System Center 2012 R2 Operations Manager, System Center 2012 - Operations Manager, System Center 2012 SP1 - Operations Manager
This topic provides a list of the operations in System Center 2012 – Operations Manager that are associated with each profile.
Report Operator
The Report Operator profile includes a set of privileges designed for users who need access to reports. A role based on the Report Operator profile grants members the ability to view reports according to their configured scope.
Retrieve the instance of the data warehouse for the management group
Write to favorite reports
Delete favorite reports
Read favorite reports
Update favorite reports
Read reports
Run reports
Access Application Advisor
Read-Only Operator
The Read-Only Operator profile includes a set of privileges designed for users who need read-only access to alerts and views. A role based on the Read-Only Operators profile grants members the ability to view alerts and access views according to their configured scope.
Read alerts
Retrieve the instance of the data warehouse for the management group
Read state of a resolution
Read instance of a connector
Read console tasks
Enumerate diagnostic objects
Enumerate the results of diagnostics
Enumerate discovery objects as defined in a management pack
Read discovery rules
Read events
Write to favorite console tasks
Delete favorite console tasks
Enumerate favorite console tasks
Update favorite console tasks
Write favorite views
Delete favorite views
Enumerate favorite views
Update favorite views
Enumerate monitoring objects
Enumerate monitoring classes
Enumerate monitoring relationship classes
Enumerate management packs
Enumerate monitor types
Enumerate module types
Enumerate monitors
Enumerate overrides
Enumerate performance data
Enumerate discovery objects as defined in a management pack
Enumerate the status of past recoveries
Enumerate relationship between monitored objects
Enumerate rules
Enumerate saved searches
Update saved searches
Write to saved searches
Delete saved searches
Enumerate state
Allows access to connected management groups
Enumerate views
Enumerate view types
Review application monitoring alerts1
1 Permissions scope can be fine-tuned for the role.
Operator
The Operator profile includes a set of privileges designed for users who need access to alerts, views, and tasks. A role based on the Operators profile grants members the ability to interact with alerts, run tasks, and access views according to their configured scope. The Operator profile contains all of the privileges found in the Read-Only Operator profile in addition to those listed below.
Update alerts
Run diagnostics
Create favorite tasks
Delete favorite tasks
Enumerate favorite tasks
Update favorite tasks
Run recovery routines
Update maintenance mode settings
Enumerate notification actions
Delete notification actions
Update notification actions
Enumerate notification endpoints
Enumerate notification recipients
Delete notification recipients
Update notification recipients
Enumerate notification subscriptions
Delete notification subscriptions
Update notification subscriptions
Enumerate tasks
Enumerate task status
Run tasks
Run monitoring compatibility check task1
Note
Additional permissions are required for files/folders to create report files.
Review application monitoring alerts1
Close application monitoring alerts1
1 Permissions scope can be fine-tuned for the role.
Advanced Operator
The Advanced Operator profile includes a set of privileges designed for users who need access to limited tweaking of monitoring configurations in addition to the Operators privileges. A role based on the Advanced Operators profile grants members the ability to override the configuration of rules and monitors for specific targets or groups of targets within the configured scope. The Advanced Operator profile contains all of the privileges found in the Operator and Read-Only Operator profiles in addition to those listed below.
Update management packs
Enumerate templates
Customize APM configuration with the overrides1
Run monitoring compatibility check task1
Note
Additional permissions are required for files/folders to create report files.
Review application monitoring alerts1
Close application monitoring alerts1
1 Permissions scope can be fine-tuned for the role.
Application Monitoring Operator
The Application Monitoring Operator profile includes a set of privileges designed for users that need access to Application Diagnostics. A user role based on the Application Monitoring Operator profile grants members the ability to see the Application Monitoring events in Application Diagnostics web console.
- Access Application Diagnostics
Author
The Author profile includes a set of privileges designed for authoring monitoring configurations. A role based on the Authors profile grants members the ability to create, edit, and delete monitoring configuration (tasks, rules, monitors, and views) within the configured scope. For convenience, Authors can also be configured to have Advanced Operator privileges scoped by group. The Author profile contains all of the privileges found in the Advanced Operator, Operator, and Read-Only Operator profiles in addition to those listed below.
Create management packs
Delete management packs
Enumerate Run As Profiles
Customize APM configuration with the overrides1
Author new APM workflows1
Run monitoring compatibility check task1
Note
Additional permissions are required for files/folders to create report files.
Review application monitoring alerts1
Close application monitoring alerts1
1 Permissions scope can be fine-tuned for the role.
Administrator
The Administrator profile includes full privileges to Operations Manager. No scoping of the Administrator profile is supported. The Administrator profile contains all of the privileges found in the Author, Advanced Operator, Operator, and Read-Only Operator profiles in addition to those listed below.
Create a resolution state
Delete a resolution state
Update a resolution state
Deploy an agent
Repair or update an installed agent
Uninstall an agent
Enumerate agent settings
Update agent settings
Enumerate agents
Start or stop managing computers or devices via a proxy health service
Enumerate computers or devices managed via a proxy health service
Insert a new instance of a computer or device
Delete an instance of a computer or device
Run discovery task
Create events
Enumerate global settings
Update global settings
Export management packs
Enumerate management servers
Delete notification endpoint
Update notification endpoint
Create performance data
Create Run As Accounts
Delete Run As Accounts
Enumerate Run As Accounts
Update Run As Accounts
Create mappings between Run As Accounts and Run As Profiles
Delete mappings between Run As Accounts and Run As Profiles
Enumerate mappings between Run As Accounts and Run As Profiles
Update mappings between Run As Accounts and Run As Profiles
Create connected management groups
Delete connected management groups
Enumerate user roles
Delete user roles
Update user roles
Write favorite reports
Delete favorite reports
Read favorite reports
Update favorite reports
Read reports
Run reports
Run APM Wizard or change APM settings
Access Application Diagnostics
Access Application Advisor
Author new APM workflows
Customize APM configuration with the overrides
Run monitoring compatibility check task
Review application monitoring alerts
Close application monitoring alerts
Control access rights to application monitoring
Create group
Edit group
Delete group
Report Security Administrator
The Report Security Administrator profile includes a set of privileges designed to enable the integration of SQL Server Reporting Services security with Operations Manager.
Export management packs
Enumerate classes as defined in the management packs
Enumerate management packs
Run reports
Enumerate rules
Access Application Advisor