Operations Associated with User Role Profiles

The Report Operator profile includes a set of privileges designed for users who need access to reports. A role based on the Report Operator profile grants members the ability to view reports according to their configured scope.

• Retrieve the instance of the data warehouse for the management group

• Write to favorite reports

• Delete favorite reports

• Read favorite reports

• Update favorite reports

• Read reports

• Run reports

• Access Application Advisor

The Read-Only Operator profile includes a set of privileges designed for users who need read-only access to alerts and views. A role based on the Read-Only Operators profile grants members the ability to view alerts and access views according to their configured scope.

• Read alerts

• Retrieve the instance of the data warehouse for the management group

• Read state of a resolution

• Read instance of a connector

• Read console tasks

• Enumerate diagnostic objects

• Enumerate the results of diagnostics

• Enumerate discovery objects as defined in a management pack

• Read discovery rules

• Read events

• Write to favorite console tasks

• Delete favorite console tasks

• Enumerate favorite console tasks

• Update favorite console tasks

• Write favorite views

• Delete favorite views

• Enumerate favorite views

• Update favorite views

• Enumerate monitoring objects

• Enumerate monitoring classes

• Enumerate monitoring relationship classes

• Enumerate management packs

• Enumerate monitor types

• Enumerate module types

• Enumerate monitors

• Enumerate overrides

• Enumerate performance data

• Enumerate discovery objects as defined in a management pack

• Enumerate the status of past recoveries

• Enumerate relationship between monitored objects

• Enumerate rules

• Enumerate saved searches

• Update saved searches

• Write to saved searches

• Delete saved searches

• Enumerate state

• Allows access to connected management groups

• Enumerate views

• Enumerate view types

• Review application monitoring alerts1

1 Permissions scope can be fine-tuned for the role.

The Operator profile includes a set of privileges designed for users who need access to alerts, views, and tasks. A role based on the Operators profile grants members the ability to interact with alerts, run tasks, and access views according to their configured scope. The Operator profile contains all of the privileges found in the Read-Only Operator profile in addition to those listed below.

• Update alerts

• Run diagnostics

• Create favorite tasks

• Delete favorite tasks

• Enumerate favorite tasks

• Update favorite tasks

• Run recovery routines

• Update maintenance mode settings

• Enumerate notification actions

• Delete notification actions

• Update notification actions

• Enumerate notification endpoints

• Enumerate notification recipients

• Delete notification recipients

• Update notification recipients

• Enumerate notification subscriptions

• Delete notification subscriptions

• Update notification subscriptions

• Enumerate tasks

• Enumerate task status

• Run tasks

• Run monitoring compatibility check task1

  Note

  Additional permissions are required for files/folders to create report files.

• Review application monitoring alerts1

• Close application monitoring alerts1

1 Permissions scope can be fine-tuned for the role.

The Advanced Operator profile includes a set of privileges designed for users who need access to limited tweaking of monitoring configurations in addition to the Operators privileges. A role based on the Advanced Operators profile grants members the ability to override the configuration of rules and monitors for specific targets or groups of targets within the configured scope. The Advanced Operator profile contains all of the privileges found in the Operator and Read-Only Operator profiles in addition to those listed below.

• Update management packs

• Enumerate templates

• Customize APM configuration with the overrides1

• Run monitoring compatibility check task1

  Note

  Additional permissions are required for files/folders to create report files.

• Review application monitoring alerts1

• Close application monitoring alerts1

1 Permissions scope can be fine-tuned for the role.

The Application Monitoring Operator profile includes a set of privileges designed for users that need access to Application Diagnostics. A user role based on the Application Monitoring Operator profile grants members the ability to see the Application Monitoring events in Application Diagnostics web console.

• Access Application Diagnostics

The Author profile includes a set of privileges designed for authoring monitoring configurations. A role based on the Authors profile grants members the ability to create, edit, and delete monitoring configuration (tasks, rules, monitors, and views) within the configured scope. For convenience, Authors can also be configured to have Advanced Operator privileges scoped by group. The Author profile contains all of the privileges found in the Advanced Operator, Operator, and Read-Only Operator profiles in addition to those listed below.

• Create management packs

• Delete management packs

• Enumerate Run As Profiles

• Customize APM configuration with the overrides1

• Author new APM workflows1

• Run monitoring compatibility check task1

  Note

  Additional permissions are required for files/folders to create report files.

• Review application monitoring alerts1

• Close application monitoring alerts1

1 Permissions scope can be fine-tuned for the role.

The Administrator profile includes full privileges to Operations Manager. No scoping of the Administrator profile is supported. The Administrator profile contains all of the privileges found in the Author, Advanced Operator, Operator, and Read-Only Operator profiles in addition to those listed below.

• Create a resolution state

• Delete a resolution state

• Update a resolution state

• Deploy an agent

• Repair or update an installed agent

• Uninstall an agent

• Enumerate agent settings

• Update agent settings

• Enumerate agents

• Start or stop managing computers or devices via a proxy health service

• Enumerate computers or devices managed via a proxy health service

• Insert a new instance of a computer or device

• Delete an instance of a computer or device

• Run discovery task

• Create events

• Enumerate global settings

• Update global settings

• Export management packs

• Enumerate management servers

• Delete notification endpoint

• Update notification endpoint

• Create performance data

• Create Run As Accounts

• Delete Run As Accounts

• Enumerate Run As Accounts

• Update Run As Accounts

• Create mappings between Run As Accounts and Run As Profiles

• Delete mappings between Run As Accounts and Run As Profiles

• Enumerate mappings between Run As Accounts and Run As Profiles

• Update mappings between Run As Accounts and Run As Profiles

• Create connected management groups

• Delete connected management groups

• Enumerate user roles

• Delete user roles

• Update user roles

• Write favorite reports

• Delete favorite reports

• Read favorite reports

• Update favorite reports

• Read reports

• Run reports

• Run APM Wizard or change APM settings

• Access Application Diagnostics

• Access Application Advisor

• Author new APM workflows

• Customize APM configuration with the overrides

• Run monitoring compatibility check task

• Review application monitoring alerts

• Close application monitoring alerts

• Control access rights to application monitoring

• Create group

• Edit group

• Delete group

The Report Security Administrator profile includes a set of privileges designed to enable the integration of SQL Server Reporting Services security with Operations Manager.

• Export management packs

• Enumerate classes as defined in the management packs

• Enumerate management packs

• Run reports

• Enumerate rules

• Access Application Advisor