Users Guide

Managing Device Group Permissions

The Device Group Permissions portal allows OmeAdministrators to grant users the permission to perform system updates and run

remote tasks on select device groups.

Using the Device Group Permissions portal, OmeAdministrators can:

• Add users to the OmeSiteAdministrators role.

• Assign device groups to each user in the OmeSiteAdministrators role, allowing the user to perform system updates and run

remote tasks on only the assigned device groups.

NOTE: To eectively manage device group permissions, it is recommended that a member of the OmeSiteAdministrators

role is removed from the OmeAdministrators and OmePowerUsers roles.

NOTE: If a device group is not assigned to a user, it only restricts the user from performing system updates or running

remote tasks on that device group. It does not hide or remove that device group from the device tree in the

Devices

portal.

The Common Tasks pane displays the Edit Members of OmeSiteAdministrators option that can be used to add or remove users

from the OmeSiteAdministrators role.

The Manage Device Group Permissions pane displays the OmeSiteAdministrators in a tree-view format. If you select

OmeSiteAdministrators at the root of the tree-view, the User Overviews are displayed in the right-side pane. If you select a user in

the OmeSiteAdministrators tree-view, the right-side pane displays the user name and the Device Groups for Tasks and Patch

Targeting section.

NOTE: An OmeSiteAdministrators task target remains ‘as is’ when the task was created. If the OmeAdministrators

change the OmeSiteAdministrators device group permissions, the task targets are not modied. Changing an

OmeSiteAdministrators device group permissions does not change tasks the OmeSiteAdministrators created earlier.

NOTE: Only Server, RAC, or custom device groups that are assigned to OmeSiteAdministrators are available to

OmeSiteAdministrators for remote or system update tasks. To make any other device groups available to the

OmeSiteAdministrators for remote or system update tasks, you must create a custom device group which includes other

device groups and assign it to the

OmeSiteAdministrators.

NOTE: If a user in the OmeSiteAdministrators role is removed from the Windows user groups, the user is not removed

from the OmeSiteAdministrators role automatically. You must remove the user from the OmeSiteAdministrators role

manually through the Edit Members of OmeSiteAdministrators option.