In our previous installation of 7.2 we had several operators that only had access to the client manager for endpoint protections and the various patches for (OS) sites.
After we upgraded to 8.1 we had issue with these users not getting alot of functionality out of the console. When the console loaded up they would see All Content, Endpoint Protection, and System Lifecycle as the only domains. Under All Content the only thing listed was Dashboards and Wizards. Some of the dashboards when access would produce Script errors but still open up.
What I found was that users that had access to the “BES Support” site were able to see things properly and those that did not have access to this site were having the behavior described above. Once I granted all operators access to the BES Support site they were able to see things properly.
I ended up hiding the content on the BES Support site that I did not want our Operators to have access to and all is good now, but I figured I would pass on the information to anyone that may run across a similar issue.
I might add that I’ve also noticed some strange action result percentages on the console. I’ve attached an image where my action shows a 105.88% (18/17) Completed. This was originally sent to 18 clients, I don’t know where it picked up a total of 17.
As tsikma suggests, the original problem of console operators having limited UI is most likely caused by the operators not being subscribed to BES Support. Traditionally, all operators are subscribed to that site, but at some point the platform added the ability to specify who has access to BES Support. While we worked under the assumption everyone was subscribed to BES Support, it looks like some of you do not want operators to have access to all of its contents.
It would help us to resolve this if we better understood the circumstances in which you want to remove access to BES Support, and what specific content in BES Support is worrisome.
I haven’t seen the percentage issue, but I’ll ask around to see if anyone else has.
I originally did this to prevent some users from viewing the BES Support fixlets. I later had request for some actions that were needed from this site so I imported the fixlets to their custom sites, and forgot to ever give them reader rights to BES Support.
The content that we mostly hide are the Tasks under the BES Support Site. We have most of the Fixlets and a couple Tasks available for all of our users. Currently all users have access to 35 of 104 items in the BES Support site.
We have 100+ operators that need to manage only a small subset of machines, we did not want them to make changes to the BES Client Settings or relays at thier locations without it coming from a more global level.