Overview
This section addresses basic information about delegated administration.
About delegated administration
Delegated administration enables IT administrators to decentralize the management of Ivanti EPMM devices. Dividing an Ivanti EPMM system into several areas of influence enables primary Ivanti EPMM administrators to maintain control over all critical areas of system management and also give limited control of specific areas of the system to other administrators. This feature the Ivanti EPMM solution to segmented administrative challenges, allowing administrators to create flexible, dynamic rules and administrative capabilities for a defined subset of users.
Device Spaces
Using delegated administration with Ivanti EPMM, administrators are assigned areas of influence called device spaces. Device spaces can represent departments or offices locations other than the main office, or other selected groups of the company. To delegate administration tasks, administrators are assigned roles that define what administrative tasks they can perform, and which devices, labels, policies, apps and configurations they can manage.
Device spaces allows IT administrators to partition groups of devices and/or users for separate management based on specific criteria such as device characteristics or LDAP Group.
Delegated Administration and Role-Based Access:
- Enables organizations to efficiently support distributed locations, user groups, and devices.
- Enables organizations to create of different “spaces” to help partition groups of devices and/or users, and to assign administrators the permission to view or manage spaces.
The original device space in Ivanti EPMM is called the global space. If you do not use delegated administration, this is the only device space in your Ivanti EPMM system. Administrators assigned to the global space can be assigned any roles. Administrators assigned to other device spaces are assigned fewer roles.