Administer > Permissions reference > Application configuration management permissions

Application configuration management permissions

The following table specifies the permissions required by users to perform specific actions with application configurations in the SA Client. For security administrators, the table answers this question: To perform a particular action, what permissions does a user need?

In addition to the action permissions listed in the Application Configuration Management Permissions Required for User Actions table, every user action also requires the Managed Servers and Groups permission.

In the Application Configuration Management Permissions Required for User Actions table, the Server Permission column is for the servers referenced by the application configuration or configuration template. Server permissions are specified by the Customer, Facility, and Device Groups permissions in the SA Client. In the Application Configuration Management Permissions Required for User Actions table, the Folder Permission column is for the folders in the SA Library that contain the application configurations and configuration templates.

To perform an action, the user requires several permissions. For example, to attach an application configuration to a server, the user must have the following permissions:

  • Manage Application Configurations: Read
  • Manage Configuration Templates: Read
  • Manage Installed Configuration and Backups on Servers: Read & Write
  • Managed Servers and Groups
  • Read & Write permissions to the facility, device group, and customer of the server

Read permission for the folder in the SA library that contains the application configuration or template

Application Configuration Management Permissions Required for User Actions

User Action

Action Permission

Server Permission (Customer, Facility, Device Group)

Folder Permission (App Config, App Config Template)

Application Configuration

 

Create Application Configuration

Manage Application Configurations:
Read & Write

None

Read & Write

View Application Configuration

Manage Application Configurations:
Read

None

Read

Edit Application Configuration

Manage Application Configurations:
Read & Write
and Manage Configuration Templates:
Read

None

Read & Write

Delete Application Configuration

Manage Application Configurations:
Read & Write

None

Read & Write

Specify Template Order

Manage Application Configurations:
Read & Write
and Manage Configuration Templates:
Read

None

Read & Write

Attach Application Configuration to Server

Manage Application Configurations:
Read
and Manage Configuration Templates:
Read
and Manage Installed Configuration and Backups on Servers:
Read & Write

Read & Write

Read

Attach Application Configuration to Device Group

Manage Application Configurations:
Read
and Manage Configuration Templates:
Read
and Manage Installed Configuration and Backups on Servers:
Read & Write
and Manage Public Device Group: Yes
and Model Public Device Group: Yes

Read & Write

Read

Set Application Configuration Values on Server

Manage Application Configurations:
Read
and Manage Configuration Templates:
Read
and Manage Installed Configuration and Backups on Servers:
Read & Write

Read & Write

Read

Push Application Configuration to Server

Manage Application Configurations:
Read
and Manage Configuration Templates:
Read
and Manage Installed Configuration and Backups on Servers:
Read & Write

Read & Write

Read

Schedule Application Configuration Push

Manage Application Configurations:
Read
and Manage Configuration Templates:
Read
and Manage Installed Configuration and Backups on Servers:
Read & Write

Read & Write

Read

Scan Configuration Compliance

Allow Configuration Compliance Scan: Yes
and Manage Application Configurations:
Read
and Manage Configuration Templates:
Read

Read

Read

Schedule Application Configuration Audit

Allow Configuration Compliance Scan: Yes
and Manage Application Configurations:
Read
and Manage Configuration Templates:
Read

Read

Read

Roll Back (Revert) Application Configuration Push

Manage Application Configurations:
Read
and Manage Configuration Templates:
Read
and Manage Installed Configuration and Backups on Servers:
Read & Write

Read & Write

Read

Application Configuration Templates

 

Create Application Configuration Template

Manage Configuration Templates:
Read & Write

None

Read & Write

View Application Configuration Template

Manage Configuration Templates:
Read

None

Read

Edit Application Configuration Template

Manage Configuration Templates:
Read & Write

None

Read & Write

Delete Application Configuration Template

Manage Configuration Templates:
Read & Write

None

Read & Write

Load (Import) Application Configuration Template

Manage Configuration Templates:
Read & Write

None

Read & Write

Set Application Configuration Template to Run as Script

Manage Configuration Templates:
Read & Write

None

Read & Write

Compare Two Application Configuration Templates

Manage Configuration Templates:
Read

None

Read

Compare Application Configuration Template Against Actual Configuration File (Preview)

Manage Application Configurations:
Read
and Manage Configuration Templates:
Read
and Manage Installed Configuration and Backups on Servers:
Read

Read

Read

The User Actions Allowed by Application Configuration Management Permissions table lists the actions that users can perform with application configurations for each permission. The User Actions Allowed by Application Configuration Management Permissions table has the same data as the Application Configuration Management Permissions Required for User Actions table, but is sorted by permission. Although not indicated in the User Actions Allowed by Application Configuration Management Permissions table, the Managed Servers and Groups permission is required for all OS provisioning actions.

For security administrators, the User Actions Allowed by Application Configuration Management Permissions table answers this question: If a user is granted a particular permission, what actions can the user perform?

User Actions Allowed by Application Configuration Management Permissions

Action Permission

User Action

Server Permission (Customer, Facility, Device Group)

Folder Permission (App Config, App Config Template)

Allow Configuration Compliance Scan: Yes
and Manage Application Configurations:
Read
and Manage Configuration Templates:
Read

Scan Configuration Compliance

Read

Read

Schedule Application Configuration Audit

Read

Read

Manage Application Configurations:
Read & Write
and Manage Configuration Templates:
Read

Create Application Configuration

None

Read & Write

Delete Application Configuration

None

Read & Write

Edit Application Configuration

None

Read & Write

Specify Template Order

None

Read & Write

View Application Configuration

None

Read

Manage Application Configurations:
Read & Write
and Manage Configuration Templates:
Read & Write

Load (Import) Application Configuration Template

None

Read & Write

Manage Application Configurations:
Read
and Manage Configuration Templates:
Read
and Manage Installed Configuration and Backups on Servers:
Read

Compare Application Configuration Template Against Actual Configuration File (Preview)

Read

Read

Manage Application Configurations:
Read
and Manage Configuration Templates:
Read
and Manage Installed Configuration and Backups on Servers:
Read & Write

Attach Application Configuration to Server

Read & Write

Read

Push Application Configuration to Server

Read & Write

Read

Roll Back (Revert) Application Configuration Push

Read & Write

Read

Schedule Application Configuration Push

Read & Write

Read

Set Application Configuration Values on Server

Read & Write

Read

Manage Application Configurations:
Read
and Manage Configuration Templates:
Read
and Manage Installed Configuration and Backups on Servers:
Read & Write
and Manage Public Device Group: Yes
and Model Public Device Group: Yes

Attach Application Configuration to Device Group

Read & Write

 

Read

Manage Configuration Templates:
Read

Compare Two Application Configuration Templates

None

Read

Manage Configuration Templates:
Read & Write

Create Application Configuration Template

None

Read & Write

Delete Application Configuration Template

None

Read & Write

Edit Application Configuration Template

None

Read & Write

Manage Configuration Templates:
Read & Write (cont.)

Set Application Configuration Template to Run as Script

None

Read & Write

View Application Configuration Template

None

Read