0 Replies Latest reply on Sep 26, 2014 10:16 AM by ledoze

    Admin delegation on system tree ( dangerous ? )

    ledoze

      I have 14 thousand systems to deploy, and need to delegate admin activity.

      I create a tree like :

       

      My organisation

         | Sub folder  A

         | Sub folder  B

         | .....

       

      Then i create Admin-A with right on tree "Sub folder A" ; Admin-B on "Sub folder B" , and so on.

       

      The only right i found is " System : Actions : Modify system and group "

       

      But in this case :

           Admin-A can delete his own root tree "Sub folder A" !!  and by the same time uninstall all McAfee agent of this node !!!

           I trust on my admin, but not so much.

       

      I would like :

           * Admin-A able to create sub folder , manage system in sub-folder ,  under "Sub folder A"

           * Never be able to uninstall any McAfee agent. ( can supress system , but if the agent is alive, it will register again next refresh )

       

      Have you a way or any idea to do this ?

      Thanks in advance