RBA in config manager 2012 SP1


Hello,

There are several built in administrative roles in config manager 2012 SP1. Today we are going to add some custom in an easy way.

First of all download and install the config manager 2012 SP1 toolkit. Here : http://www.microsoft.com/en-us/download/details.aspx?id=36213

Perform a default install.


Now start the RBA viewer utility.

Pick the security role you want to modify. You can see the actions available in the left pane.




Now select the objects that you want to modify , for example we want to have a role used for adding resources to collections. So select collection -> Modify ( for adding resources ) and modify resources for updating membership

You can find the actions by using the right side of the screen and selecting the required actions ex. Add resource



Now export the created profile.



Import the xml in config manager and assign a user with the role within the config manager console. You can now test the result for the user without knowing password of the specific user.


Just start the runas feature.



Fill in username ( no password required )



And verify the result using the console and reports button.


Nice toolset.

Enjoy.


Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s