User's Manual

Device Group Permissions
Device Group Permissions Portal
Question: Can I add a user group to the OmeSiteAdministrators role?
Answer: No, adding a user group to the OmeSiteAdministrators role is not supported in OpenManage
Essentials version 1.2.
Question: Can I add an OmeAdministrator to the OmeSiteAdministrators role?
Answer: Yes, you can add an OmeAdministrator to the OmeSiteAdministrators role. The user will have all
the privileges of the OmeAdministrator. However, to effectively manage device group permissions, it is
recommended that a member of the OmeSiteAdministrators role is removed from the
OmeAdministrators and OmePowerUsers roles.
Question: Can I add a user who has not logged on to OpenManage Essentials to the
OmeSiteAdministrators role?
Answer: Yes, you can use the Edit Members of OmeSiteAdministrators wizard to add a user who has not
logged on to OpenManage Essentials to the OmeSiteAdministrators role.
Question: What happens if a OmePowerUser is added to the OmeSiteAdministrators role?
Answer: Roles and permissions are additive. The user will not have all of (but retain some of) the
restrictions of a OmeSiteAdministrator. The user will be able to perform edit actions that the
OmeSiteAdministrator was not able to perform. Target security cannot be guaranteed for this type of user
(they can edit device groups assigned to them).
Question: Can I promote an OmeSiteAdministrator to an OmeAdministrator?
Answer: Yes, the user will have all privileges and will be able to target all devices. It is suggested, but not
required, to remove the user from the OmeSiteAdministrators role before adding the user to the
OmeAdministrators role.
Question: How do I add a current OmeAdministrator to the OmeSiteAdministrators role?
Answer:
1. Remove the user from the OmeAdministrators Windows user group.
2. In the Device Group Permissions portal, use the Edit Members of OmeSiteAdministrators option to
select and add the user to the OmeSiteAdministrators role.
3. When the user logs in again, the user will be an OmeSiteAdministrator.
Question: A user is removed from the OmeAdministrators role and then added to the
OmeSiteAdministrators role. What happens to the tasks that were created while the user was an
OmeAdministrator?
Answer: The task created when the user was an OmeAdministrator can still be executed on the targets
selected at the time of task creation.
Remote and System Update Tasks
Question: What happens to the task target for a remote task if the OmeSiteAdministrators device group
permissions change?
Answer: The task targets of a remote task are not affected by changes to device group permissions.
Remote tasks that were created earlier may have task targets that the OmeSiteAdministrator is not
assigned to.
Question: What must an OmeSiteAdministrator do to edit a task?
212