I'm trying to setup a permission set for techs to be able to deploy the McAfee Agent, but not be able to alter the System Tree structure, modify policies, tasks, etc. I've been able to create a permission set that allows for the deployment of the Agent without allowing users to modify tasks and policies, but I still haven't figured out how to keep them from modifying the system tree structure.
Is there a way to do this? If so, how?
....Does this make any sense to anyone?
How do you guys go about granting deployment issues to different users while still keeping the System Tree clean?