I took away the audit and was still able to see the security tab on the collection, so I don’t think it has to do with that.
In regards to the enforce security when logged on as a full admin even if you bring up the security tab on the collection you’re not able to modify/change security. I know on SCCM 2007 you could do instance rights, but that doesn’t even exist anymore in SCCM2012 anymore that I can tell. From: [email protected] [mailto:[email protected]] On Behalf Of Sean Pomeroy Sent: Tuesday, December 30, 2014 10:30 AM To: [email protected] Subject: Re: [mssms] RBAC Permissions One would assume Audit means they can view the permissions where as enforce would mean can modify. I am not in a position to test currently, but if you change to enforce can a user in that role modify permissions on collections? On Tue Dec 30 2014 at 9:26:28 AM sccmfun <[email protected]> wrote: Nice, this is cool to have. Doesn’t answer my original question though on what the 2 rights do, but this is helpful. Thanks! From: [email protected] [mailto:[email protected]] On Behalf Of Wilson, Patrick (Pat) Sent: Monday, December 29, 2014 6:05 PM To: [email protected] Subject: RE: [mssms] RBAC Permissions Maybe this will help?? Pat Wilson CONFIDENTIALITY NOTICE: This e-mail is intended solely for the person or entity to which it is addressed and may contain confidential and/or privileged information. Any review, dissemination, copying, printing, or other use of the e-mail by persons or entities other than the addressee is prohibited. If you have received this e-mail in error, please contact the sender or send an e-mail to the sender and immediately delete the material from your computer. Thank you. P Please consider the environment before printing this e-mail, and do so only if absolutely necessary From: [email protected] [mailto:[email protected]] On Behalf Of sccmfun Sent: Monday, December 29, 2014 3:25 PM To: [email protected] Subject: [mssms] RBAC Permissions So setting up RBAC and tweaking all the permissions. When looking at collections there are 2 rights, that I can’t seem to figure out. 1) Audit security 2) Enforce security I’ve turned them off/on to see if I gain or loss something in the console, but don’t seem to. Anyone know what this does? Would love to be able to turn it off/on and see some change in the console. Is there some article that lists detailed info on all the permissions? My guess is no, since I couldn’t find anything. Thanks
