Read Only Operator Role but with Remove permissions

Usage and Config
1

Hi folks!

I am trying to create a role which is read-only, but, is allowed to remove computers from the database.

I followed this page loosely but was a bit confused. I tried setting Can Create Actions to Yes, but that allowed people to take actions - which I don’t want to permit.

Here is where the role stands now:

image
image569×749 10.9 KB

The role has no explicit computer assignments, access to our custom site as Reader, and the WebUI has all set to None.

Thanks!

2

Deleting a Computer requires the ‘Can Create Actions’ permission, as you found at https://help.hcl-software.com/bigfix/10.0/platform/Platform/Config/c_understanding_operator_rights.html

You won’t be able to do a combination in the Console that allows deleting computers without Take Action. You could limit what actions could be taken, by removing the users access to Sites and blocking the ‘Custom Content’ option; or if you have some criteria for automatically removing computers, you might look into the Cleanup options in the BESAdmin tool, which could schedule deleting computers that haven’t reported in some specified timeframe.