How to create a security role to delegate package creation and deployment?

Hi,
I am new to SCCM 2012 and I would like to delegate packaging and deployment based on an AD container and user. For example, I have a US-SCCM-Admin account created in the US OU in Active Directory. I also have computers in the US Computers OU in AD. I am
not sure what settings I need so that the US-SCCM-Admin account only has rights to create and deploy packages to the US OU and no where else? I added US-SCCM-Admin security group from AD to the "Administrative Users" group in SCCM. But now I need
to configure a role for this group but I am not sure which one to copy or import? I tried copying the "Application Deployment Manager" role and renaming it appropriately but when I login to SCCM as this user, they dont have the option to create or
deploy packages? Does anyone have a simple step by step on this or explanation on what to do to delegate package creation and deployment based on the user in an AD group? TIA

The Application Deployment Manager role is only allowed to deploy an already existing application. You would have to use the
Application Administrator role instead.
Torsten Meringer | http://www.mssccmfaq.de

Similar Messages

  • How to create a special view for sharepoint list A and deploy this view to specific user personal view?

    How to create a public view for sharepoint list A and deploy this view to specific user personal view? Is that possible OOTB?

    Views cannot be exported or moved. Can you elaborate your requirement?
    --Cheers

  • How to create a secure & non editable PDF? So that it cannot be modified by any of the secondary too

    How to create a secure & non editable PDF? So that it cannot be modified by any of the secondary tools available online for security breaks and editing of PDF document
    I put all the security options but still there are tools to break the security (even password) leading to editing of document
    Need to avoid any such situation

    If the document is important, and there is something to be gained by modifying it - then someone will just make a new copy of it (e.g. print and scan, screen capture), and make a new document, then change it.
    If protecting the integrity of the document - proving it is unchanged - is the thing, look at digital signatures. Forget security, the signed file can be freely edited, but the signature will always show it is changed.

  • Portal Run time error when created a seperate role for Transport package.

    Hi Experts,
    I have created a seperate role for Transport Package(import/export iviews).
    Normally we have transport package functionality in system admin.
    Below steps i followed for creating the new role(trans admin)
    1.Copied SAP provided system admin role to a seperate folder.
    2.Deleted reamining portal objects(like UWL, portal display etc ..) except transport packege workset.
    3.Renamed the role to trans admin.
    I have assigned that role to my self, it is working fine to me when i clcik on export and import.I have super admin role.
    when i assign this role to some portal users, Export is not working.
    when user clicks on Export role they are getting below error.
    Portal Runtime Error
    An exception occurred while processing a request for :
    iView : N/A
    Component Name : N/A
    Access denied (Object(s): com.sap.portal.system/security/sap.com/NetWeaver.Portal/medium_safety/com.sap.portal.appdesigner.contentcatalog/components/Framework).
    Exception id: 12:10_31/08/09_0031_21763550
    See the details for the exception ID in the log file
    By looking into exception iD also, same error access denied it is showing.
    Please Advice.
    Thanks
    Sony.

    Hi Raghu,
    Thanks for the reply.
    I have given full permissions to all users to this trans admin role before itself.
    Thanks in advance.
    Sony.
    Edited by: ambica sony on Aug 31, 2009 1:53 PM

  • I am being forced to create 3 security question from your dropdown list and I can choose the questions but can't enter anything in the answer field??

    I am being forced to create 3 security question from your dropdown list and I can choose the questions but can't enter anything in the answer field??

    The problem is twenty three people leaving or twenty three thousand leaving has zero impact on a carrier with over 100 million customers. And they have the lowest churn rate. So if 10,000 or 20,000 or more churn out it means little to the carrier.
    If you have a real lawyer he/she will advise you that you have no case. The device was not lost or stolen by the carrier, you were not eligible for a new device, and like any business who employs large numbers of poorly trained personnel who make low wages what was told to you is not in writing. So a verbal exchange does not hold up.
    In fact in Verizon's customer agreement it has such a disclaimer against any verbal exchanges so if you have that agreement in writing, go get them.
    The posting on public forums and places like Face Book, Linkin, Google+ or a personal web site can open you up to a lawsuit for Dilution of Trade Name, and other offences. However if you have proof then go for it.
    Unfortunately that is how big business works today. A pity

  • How to create list of a View's column names and source

    Using SQL 2005, 2008, and 2012
    How to create list of a View's column names and source. For the following example would like to @Print something like the following.  Does anyone already have some code to do this? I realize there are probably some gotchas, but the views that I am looking
    at to use this follows the code snippet pattern below.
    DBACCT.[Account Number]
    dbo.ConvertDate(DBACDT). [Boarding Date]
    DBXES.DBXES
    CREATE VIEW [dbo].[v_ods_DBAL]
    AS
    SELECT DBACCT AS [Account Number], dbo.ConvertDate(DBACDT) AS [Boarding Date], DBXES
    FROM dbo.ods_DBAL

    The column information can be obtained from INFORMATION_SCHEMA.COLUMNS view using logic like below
    SELECT c.COLUMN_NAME,c.DATA_TYPE
    FROM INFORMATION_SCHEMA.COLUMNS c
    WHERE EXISTS (SELECT 1
    FROM INFORMATION_SCHEMA.TABLES
    WHERE TABLE_NAME = c.TABLE_NAME
    AND TABLE_TYPE='VIEW')
    http://technet.microsoft.com/en-us/library/ms188348.aspx
    Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs

  • How to create a password file for executing psadmin command to deploy portl

    how to create a password file for executing psadmin command to deploy portlet

    What you have done is perfectly right. The password file doesn't have anything else apart from the password
    for example in your case
    $echo password > /tmp/password.txt
    However I remember that in windows install, the Application server used to wait for a user's input when a deploy was to be done for the first time. So Can you read the Release notes or the Readme file which has come with windows.
    The solution was,
    manually use asadmin command of application server to deploy some war (any webapp will do), at this time, a question will be prompted to accept a certificate. once this is done, deploy portlet should work fine!!!
    HTH

  • How to create rtf template to view report in Word and Excel, with numeric f

    Hi,
    Please help me!
    How to create rtf template to view report in Word and Excel, with numeric formatted fields (like this 999 999 999,99 with spaces between numbers) and then end user be able to process those fields with Excel tools (sum, etc).
    Thank you.

    From what I have seen Excel can not handle 999 999 999.00. You can use 999999999.00 and then format it as you want in the xls bt you can not have values like 999 999 999.00 coming from publisher output and have functions on the values in Excel
    Tim

  • How to create PDF with Form Builder (T-Code:SPF) and how to use it?

    How to create PDF with Form Builder (T-Code:SPF) and how to use it? Is there anyone can show me some doc. or PA material ? << removed >>  Thank you very much!!
    Edited by: Rob Burbank on Nov 11, 2010 1:04 PM

    PDF forms also known as Adobe From or Interactive Forms.
    Check this link -
    Interactive Forms
    REG:ADOBE FORM
    Adobe forms
    Regards,
    Amit

  • ....how to create table maintanence generator for a z table and how to use

    Hi...
    3....how to create table maintanence generator for a z table and how to use that for transfering a selected records to one server to another server.
    thanks and regards,
    k.swaminath reddy

    Hi,
    Table maintanance Generator is used to manually
    input values using transaction sm30.The Table Maintenance Generator is used to create table maintenance program to add, modify or delete records in the database table. This can be accessed using transaction SE54 or in SE11 using the menu Utilities->Table Maintenance Generator
    <b>
    Follow below steps</b>
    go to se11 check table maintanance check box under
    attributes tab
    utilities-table maintanance Generator->
    create function group and assign it under
    function group input box.
    also assign authorization group default &NC& .
    select standard recording routine radio in table
    table mainitainence generator to move table
    contents to quality and production by assigning
    it to request.
    select maintaience type as single step.
    maintainence screen as system generated numbers
    this dialog box appears when you click on create
    button
    save and activate table
    http://help.sap.com/saphelp_nw04/helpdata/en/cf/21ed2d446011d189700000e8322d00/content.htm
    One step, two step in Table Maintenance Generator
    Single step: Only overview screen is created i.e. the Table Maintenance Program will have only one screen where you can add, delete or edit records.
    Two step: Two screens namely the overview screen and Single screen are created. The user can see the key fields in the first screen and can further go on to edit further details.
    please check the link for getting information about table maintenance generator !
    https://www.sdn.sap.com/irj/sdn/advancedsearch?query=use%20of%20table%20maintenance%20generator&cat=sdn_all
    http://www.sapdevelopment.co.uk/tips/tips_tabmaint_tcode.htm
    http://www.sap-img.com/abap/create-a-table-maintance-program-for-a-z-table.htm
    Regards,
    Priyanka.

  • How to create a graph representing a big tree(parents and children are know

    How to create a graph representing a big tree(parents and children are known)?
    Thank you so much!
    Also, I need to write the graph into a jpg/gif file or display the graph in the web browser.
    I got a code from JGraph and can create the graph I want, although unextendable. However, JGraph define the graph as class Gscene instead of Img or BufferedImg or RenderedImg. Therefore, I couldn't use ImageIO.write(image, ext, file) to write the graph into a jpg file.

    aiGrace wrote:
    How to create a graph representing a big tree(parents and children are known)?Hierarchical data structures are covered here all the time. Please search before you post. This topic has been covered over and over.
    Thank you so much!
    Also, I need to write the graph into a jpg/gif file or display the graph in the web browser. I got a code from JGraph and can create the graph I want, although unextendable. However, JGraph define the graph as class Gscene instead of Img or BufferedImg or RenderedImg. Therefore, I couldn't use ImageIO.write(image, ext, file) to write the graph into a jpg file.Did you read the JGraph API? I'm guessing it exposes a method to get the image data somehow.

  • How to find out if Role is active or not and also delimited or not ?

    How to find out if Role is active or not and also delimited or not ?

    Hi,
    Basically this job is done by BASIS (Technical) Team.
    They can check whether role is active or not by using tcode "PFCG" by giving role name.
    Regards,
    Rameshwar

  • Security Issue: How to create a derived role from the Base role

    Hi All,
    Kindly let me know how can i create a derived role from the base role?
    Please respond at the earliest.
    Thanks in advance.
    Ramesh.

    Go to PFCG and Create a role with desired Name.
    In the Description Tab, on the Left Side there is a text box for "Derive From "
    enter the Base role.
    Now your newly created role is derived from the Base role.
    Save the newly created role and again run PFCG, enter the Base role name and execute.Select Edit role. Go to Authorization tab.
    Edit Authorization.
    In the Menu Adjust Derived -> Generate and Adjust derive
    This will Generate the derived role.
    Now you may go and check the authorization in the derived role.

  • Create , delete "security roles" in weblogic console - sample Security providers

    Hi Everyone:
    Weblogic gave out sample Security Providers for version 7.0 and 8.1. In
    those sample Security Provider , the author of codes used property files as
    Security Providers Database, however he/she didn't show how to create a
    Manageable Sample Role Mapping Provider or Manageable Sample Authentication
    Provider, so Administrator of weblogic console can create and delete
    "security roles" in weblogic console.
    Have anyone known how to do that?
    Ming Qin

    "ming qin" <[email protected]> wrote in message news:[email protected]..
    Hi Everyone:
    Weblogic gave out sample Security Providers for version 7.0 and 8.1.In
    those sample Security Provider , the author of codes used property filesas
    Security Providers Database, however he/she didn't show how to create a
    Manageable Sample Role Mapping Provider or Manageable SampleAuthentication
    Provider, so Administrator of weblogic console can create and delete
    "security roles" in weblogic console.
    Have anyone known how to do that?
    I would ask in the weblogic.developer.interest.management.console newsgroup.
    >
    Ming Qin

  • How to create automatically users&roles in CUA and in chlid systems?

    Hi,
    i have a CUA on a 2 chlid R/3 systems (test and training) and 2 portal systems (test and training).
    i need to create a web application to create automatically users test and users training in CUA and see them in the R/3 chlid systems and at the same time to create autmatically a roles in CUA and R/3 chlid systems for those users (we sppose that the role is already stored in a table).
    are there any standard BAPI or Funcion modules that can do this job?
    is the role created automatically in CUA can be seen automaticall in the portal child system?
    any help?
    Thanks&Best regards

    You can use one of the various ways Java EE provides you, e.g. container managed authentication.
    It's also all in the Java EE tutorial: [http://java.sun.com/javaee/5/docs/tutorial/doc/bncas.html].
    You can configure it in the application server as well: [http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html].
    Here is an example how to use it in JSF: [http://ocpsoft.com/java/acegi-spring-security-jsf-login-page/].

Maybe you are looking for