(imported topic written by SystemAdmin)
I would like to give our Operations staff the ability to run fixlets, tasks and baselines from a custom site. I understand how to do that and give them READ access to take Action on fixlets, tasks and baselines, but how can I lock down some of the other areas so they don’t do things I don’t want them to have access.
For example, giving them access to a list of computers by automatic computer group, they could still right-click and change settings for the computers, change relay settings etc.
In short what else can I lock down to READ only access, yet still allow them to take action on fixlets, tasks and baselines