(imported topic written by SystemAdmin)
We’d like to have the ability to give someone read-only access (no deploy) for certain things. Right now whatever you can see, you can deploy. The console is quite helpful, and must faster (in many circumstances) than forcing people to use web reports.
Examples…
Give some support people in our group (who don’t deploy patches) access to the console to quickly look at the workstations without giving them access to affect anything. Right-click options are OK (refresh, watch log, remote manage), but shouldn’t be able to deploy any fixlets/tasks. These people would not be allowed to see anything as far as servers go, so they wouldn’t even have read-only access to those.
or
Give the workstation support people access to see the servers, but not allowed to deploy.
or
Give the server support people access to see the workstations, but not allowed to deploy.