One would assume Audit means they can view the permissions where as enforce would mean can modify. I am not in a position to test currently, but if you change to enforce can a user in that role modify permissions on collections?
On Tue Dec 30 2014 at 9:26:28 AM sccmfun <[email protected]> wrote: > Nice, this is cool to have. > > > > Doesn’t answer my original question though on what the 2 rights do, but > this is helpful. > > > > Thanks! > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Wilson, Patrick (Pat) > *Sent:* Monday, December 29, 2014 6:05 PM > *To:* [email protected] > *Subject:* RE: [mssms] RBAC Permissions > > > > Maybe this will help?? > > > > *Pat Wilson* > > > > CONFIDENTIALITY NOTICE: This e-mail is intended solely for the person or > entity to which it is addressed and may contain confidential and/or > privileged information. Any review, dissemination, copying, printing, or > other use of the e-mail by persons or entities other than the addressee is > prohibited. If you have received this e-mail in error, please contact the > sender or send an e-mail to the sender and immediately delete the material > from your computer. Thank you. > > > > P Please consider the environment before printing this e-mail, and do so > only if absolutely necessary > > > > *From:* [email protected] [ > mailto:[email protected] <[email protected]>] *On > Behalf Of *sccmfun > *Sent:* Monday, December 29, 2014 3:25 PM > *To:* [email protected] > *Subject:* [mssms] RBAC Permissions > > > > So setting up RBAC and tweaking all the permissions. When looking at > collections there are 2 rights, that I can’t seem to figure out. > > > > 1) Audit security > > 2) Enforce security > > > > I’ve turned them off/on to see if I gain or loss something in the console, > but don’t seem to. Anyone know what this does? Would love to be able to > turn it off/on and see some change in the console. > > > > Is there some article that lists detailed info on all the permissions? My > guess is no, since I couldn’t find anything. > > > > Thanks > > > > >

