Assigning User Permissions

If you have an administrator account, you have unlimited permissions and can assign and change permissions for normal user accounts. When a normal user account is assigned permissions to a functionality, that user has permissions for that specific functionality in his home folder and any associated sub-folders. A user must have permissions for a folder in order to view or edit the profiles, devices, or groups associated with the folder. A user assigned to a folder who has read/write permissions for profiles can exclude an inherited profile but will not be able to modify it.

Permissions can be assigned when a user is created, or from a specific folder, profile, or mobile device group. This section describes the permissions available from the System Users page. For information on giving permissions to a user for a specific folder, profile, or mobile device group, see Assigning Authorized Users.

The following table describes permissions that are available for profiles:

Management			Applications
View Only allows the user to view the settings for a profile.	View/Edit allows the user to edit the settings of a profile.	Print allows the user to print the barcodes for a Scan to Config profile.	View Only allows the user to view where profiles are applied.	View/Edit allows the user to edit where profiles are applied.

Permissions to view or edit smart mobile device profiles also allow the user to view or edit payloads.

The following table describes permissions that are available for inventory:

Inventory
Mobile Devices	View Only allows the user to view the mobile devices for assigned folders.	View/Manage allows the user to manage the mobile devices for assigned folders or mobile device groups.
Device Groups	View Only allows the user to view the mobile device groups and the devices they contain.	View/Edit allows the user to edit group properties for mobile device groups. A user must also have Mobile Devices permissions in order to view/edit the devices in a group.
Mobile Device Properties	View Only allows the user to view mobile device properties.	View/Edit allows the user to edit properties for mobile devices.
Remote Control	View Only allows the user to connect to a mobile device using Remote Control.	View/Edit allows the user to connect to a device using Remote Control or configure Remote Control connection profiles.

The following table describes the other permissions that are available:

Rule and Other Permissions
Enrollment	View Only allows the user to view enrollment rules.	View/Edit allows the user to view, manage, and configure enrollment rules.
Folder Management	View Only allows the user to view folder configurations and settings.	View/Edit allows the user to view, manage, and configure folders.
Deployment	View Only allows the user to view recent and scheduled deployments.	View/Edit allows the user to initiate deployments.
Filestore Management	View Only allows the user to view files in the Central File Store. Allows the user to select files from the Central File Store when creating payloads.	View/Edit allows the user to manage files in the Central File Store.
Reports	View/Edit allows the user to view and create reports.