Users Guide

Managing Device Group Permissions

The Device Group Permissions portal allows OmeAdministrators to grant users the permission to

perform system updates and run remote tasks on select device groups.

Using the Device Group Permissions portal, OmeAdministrators can:

• Add users to the OmeSiteAdministrators role.

• Assign device groups to each user in the OmeSiteAdministrators role, allowing the user to perform

system updates and run remote tasks on only the assigned device groups.

NOTE: To effectively manage device group permissions, it is recommended that a member of the

OmeSiteAdministrators role is removed from the OmeAdministrators and OmePowerUsers roles.

NOTE: If a device group is not assigned to a user, it only restricts the user from performing system

updates or running remote tasks on that device group. It does not hide or remove that device group

from the device tree in the Devices portal.

The Common Tasks pane displays the Edit Members of OmeSiteAdministrators option that can be used

to add or remove users from the OmeSiteAdministrators role.

The Manage Device Group Permissions pane displays the OmeSiteAdministrators in a tree-view format.

If you select OmeSiteAdministrators at the root of the tree-view, the User Overviews are displayed in the

right-side pane. If you select a user in the OmeSiteAdministrators tree-view, the right-side pane displays

the user name and the Device Groups for Tasks and Patch Targeting section.

NOTE: An OmeSiteAdministrators task target remains ‘as is’ when the task was created. If the

OmeAdministrators change the OmeSiteAdministrators device group permissions, the task targets

are not modified. Changing an OmeSiteAdministrators device group permissions does not change

tasks the OmeSiteAdministrators created earlier.

NOTE: Only Server, RAC, or custom device groups that are assigned to OmeSiteAdministrators are

available to

OmeSiteAdministrators for remote or system update tasks. To make any other device

groups available to the OmeSiteAdministrators for remote or system update tasks, you must create

a custom device group which includes other device groups and assign it to the

OmeSiteAdministrators.

NOTE: If a user in the OmeSiteAdministrators role is removed from the Windows user groups, the

user is not removed from the OmeSiteAdministrators role automatically. You must remove the user

from the OmeSiteAdministrators role manually through the Edit Members of

OmeSiteAdministrators option.