Administer > Permissions reference > Script execution permissions

Script execution permissions

The Script execution permissions required for user actions table specifies the Script Execution permissions required by users to perform specific actions in the SA Client. For security administrators, the table answers this question: To perform a particular action, what permissions does a user need?

If a customer is assigned to a folder, then customer constraints might limit the objects that can be associated with a software policy contained in the folder. For a list of tasks affected by these constraints, see Folders, customer constraints, and software policies.

Script execution permissions required for user actions

User Action

Action Permission

Server Permission (Customer, Facility, Device Group)

Folder Permissions

Creating a Non Super User Server Script

Manage Server Script: Read & Write

N/A

Write

Creating a Super User Server Script

Manage Server Script: Read & Write

Allow Control of Super User Server Scripts: Yes

N/A

Write

Creating an OGFS Script

Manage OGFS Script: Read & Write

N/A

Write

Opening (Viewing all script properties except script contents) a Non Super User Server Script

Manage Server Script: Read

N/A

Execute

Opening (Viewing all script properties including script contents) a Non Super User Server Script

Manage Server Script: Read

N/A

  

Opening (Viewing all script properties except script contents) a Super User Server Script

Manage Server Script: Read

Allow Control of Super User Server Scripts: Yes

N/A

  

Opening (Viewing all script properties including script contents) a Super User Server Script

Manage Server Script: Read

Allow Control of Super User Server Scripts: Yes

N/A

  

Opening (Viewing all script properties except script contents) an OGFS Script

Manage OGFS Script: Read

N/A

Execute

Opening (Viewing all script properties including script contents) an OGFS Script

Manage OGFS Script: Read

N/A

Read

Editing Non Super User Server Script Properties

Manage Server Script: Read & Write

Note: The Allow Control of Super User Server Scripts: Yes permission is required to edit the script property, “Can Run as Super User”.

N/A

Write

Editing a Super User Server Script

Manage Server Script: Read and Write

Allow Control of Super User Server Scripts: Yes

N/A

Write

Editing OGFS Script Properties

Manage OGFSr Script: Read & Write

N/A

Write

Locating Server Script in Folders

Manage Server Script: Read

N/A

Read

Locating OGFS Script in Folders

Manage OGFS Script: Read

N/A

Read

Exporting a Server Script

Manage Server Script: Read

N/A

Read

Exporting an OGFS Script

Manage OGFS Script: Read

N/A

Read

Renaming a Server Script

Manage Server Script: Read & Write

N/A

Write

Renaming a Super User Server Script

Manage Server Script: Read & Write

Allow Control of Super User Server Scripts: Yes

N/A

Write

Renaming an OGFS Script

Manage OGFS Script: Read & Write

N/A

Write

Deleting a Server Script

Manage Server Script: Read & Write

N/A

Write

Deleting a Super User Server Script

Manage Server Script: Read & Write

Allow Control of Super User Server Scripts: Yes

N/A

Write

Deleting an OGFS Script

Manage OGFS Script: Read & Write

N/A

Write

Running Server Script as Super User

Managed Servers and Groups: Yes

Read and Write

Execute

Running Server Script as a Super User (by copying the script contents from another script)

Manage Server Script: Read

Run Ad-Hoc Scripts: Yes

Run Ad-Hoc Scripts and Source Visible Server Scripts as Super User: Yes

Managed Servers and Groups: Yes

Read and Write

Read

Running Server Script as a specified user

Managed Servers and Groups: Yes

Read and Write

 

Execute

Running Server Script as a specified user (by copying the script contents from another script)

Manage Server Script: Read

Run Ad-Hoc Scripts: Yes

Managed Servers and Groups: Yes

Read and Write

Read

Running Ad-Hoc Scripts

Run Ad-Hoc Scripts: Yes

Managed Servers and Groups: Yes

Read and Write

 

N/A

Running Ad-Hoc Scripts as Super User

Run Ad-Hoc Scripts: Yes

Run Ad-Hoc Scripts and Source Visible Server Scripts as Super User: Yes

Managed Servers and Groups: Yes

Read and Write

 

N/A

Running OGFS Scripts

N/A

N/A

Execute

The User Actions Allowed by Script Execution Permissions table lists the actions that users can perform for each Script Execution permission. The User Actions Allowed by Script Execution Permissions table has the same data as The Script execution permissions required for user actions table, but is sorted by action permission. For security administrators, the User Actions Allowed by Script Execution Permissions table answers this question: If a user is granted a particular action permission, what actions can the user perform?

User Actions Allowed by Script Execution Permissions

Action Permission

User Action

Server Permission (Customer, Facility, Device Group)

Folder Permissions

Manage Server Script: Read & Write

Creating a Non Super User Server Script

N/A

Write

 

Editing Non Super User Server Script Properties

N/A

Write

 

Deleting a Non Super User Server Script

N/A

Write

 

Renaming a Non Super User Server Script

N/A

Write

Manage Server Script: Read

Opening (Viewing all script properties including script contents) a Non Super User Server Script

Opening (Viewing all script properties including script contents) a Super User Server Script

N/A

Read

 

Locating Server Script in Folders

N/A

Read

 

Exporting Server Scripts

N/A

Read

Manage Server Script: Read

Opening (Viewing all script properties excluding script contents) a Non Super User Server Script

Opening (Viewing all script properties excluding script contents) a Super User Server Script

 

Execute

Manage Server Script: Read & Write

And

Allow Control of Super User Server Scripts: Yes

Creating a Super User Server Script

 

N/A

Write

 

Editing Super User Server Script Properties

Editing Non Super User Server Script Properties

N/A

Write

 

Renaming a Super User Server Script

Renaming a Non Super User Server Script

N/A

Write

 

Deleting a Super User Server Script

Deleting a Non Super User Server Script

N/A

Write

Manage OGFS: Read & Write

Creating an OGFS Script

N/A

Write

 

Editing OGFS Script Properties

N/A

Write

 

Deleting an OGFS Script

N/A

Write

 

Renaming an OGFS Script

N/A

Write

Manage OGFS Script: Read

Opening (Viewing all the OGFS Script Properties, including script contents) an OGFS Script

N/A

Read

 

Locating OGFS in Folders

N/A

Read

 

Exporting OGFS Scripts

N/A

Read

Manage OGFS Script: Read

Opening (Viewing all the OGFS Script Properties, excluding script contents) an OGFS Script

N/A

Execute

Run Ad-Hoc Scripts

Running Ad-Hoc scripts

Read and Write

N/A

Run Ad-Hoc Scripts and Source Visible Server Scripts as Super User

Running Ad-Hoc scripts as Super User

Running any visible Saved Server Scripts as Super User. This also applies to Server Scripts that are not designated as Super User Scripts.

Read and Write

N/A

N/A

Running Non Super User Server Script

Read and Write

Execute

N/A

Running Private Scripts

Read and Write

Execute (on Home folder)

N/A

Running OGFS Scripts

N/A

Execute

The following table lists the script execution permissions required for running scripts using a software policy.

Script Execution Permissions Required for Software Management

User Action

Action Permission

Server Permission (Customer, Facility, Device Group)

Folder Permissions

Adding a Server Script to a software policy

Manage Server Scripts: Read

N/A

Read

Adding a Server Script to the Options step in the Remediate window

N/A

N/A

Execute

Adding a Server Script to the Options step in the Remediate window (Copying the script contents)

Manage Server Scripts: Read

Run Ad-Hoc Scripts: Yes

N/A

Read

Adding a Super User Server Script to the Options step in the Remediate window

Manage Server Scripts: Read

Run Ad-Hoc Scripts: Yes

Run Ad-Hoc Scripts and Source Visible Server Scripts as Super User: Yes

N/A

Read

Specifying an Ad-Hoc Script to the Options step in the Remediate window

Run Ad-Hoc Scripts: Yes

N/A

N/A

Specifying an Super User Ad-Hoc Script to the Options step in the Remediate window

Run Ad-Hoc Scripts: Yes

Run Ad-Hoc Scripts and Source Visible Server Scripts as Super User: Yes

N/A

N/A

Adding a Server Script to the Options step in the Install Software window

N/A

N/A

Execute

Adding a Server Script to the Options step in the Install Software window (Copying the script contents)

Manage Server Scripts: Read

Run Ad-Hoc Scripts: Yes

N/A

Read

Adding a Super User Server Script to the Options step in the Install Software window

Manage Server Scripts: Read

Run Ad-Hoc Scripts: Yes

Run Ad-Hoc Scripts and Source Visible Server Scripts as Super User: Yes

N/A

Read

Specifying an Ad-Hoc Script to the Options step in the Install Software window

Run Ad-Hoc Scripts: Yes

N/A

N/A

Specifying an Super User Ad-Hoc Script to the Options step in the Install Software window

Run Ad-Hoc Scripts: Yes

Run Ad-Hoc Scripts and Source Visible Server Scripts as Super User: Yes

 

N/A

N/A

Send Help Center feedback