SCCM RBAC Implementation Troubleshooting Guide ConfigMgr

SCCM RBAC Implementation Troubleshooting Guide ConfigMgr. Role-Based Administration (RBA) is an excellent feature that is available in CM 2012. For RBA-related issues, you need to play around with Administrative Users, Security Roles, and Security Scopes.

I thought of putting together the posts related to RBA implementation gotchas and troubleshooting in one place so that it would be easily accessible. SCCM RBAC Implementation Troubleshooting Guide ConfigMgr?

SCCM RBAC Implementation Troubleshooting Guide ConfigMgr

SCCM RBAC Implementation Troubleshooting Guide ConfigMgr
SCCM RBAC Implementation Troubleshooting Guide ConfigMgr

1.  What is RBAViewer.exe? 

The RBA modeling and auditing (RBA viewer) tool is System Center 2012 Configuration Manager Server Troubleshooting Tool.  The RBA viewer is a new addition to the Configmgr tool kit. In this post, I’m trying to explore “RBA Viewer” in some more detail. How it can be used more effectively? SCCM RBAC Implementation Troubleshooting Guide ConfigMgr?

Patch My PC

 2.  Infrastructure Administrator – Default Client Settings Issue!

Infrastructure administrators are not able to view “Default Client Settings” and couldn’t create “Custom Client Device Setting” or “Custom Client User Setting”. Few tips to resolve some common issues with build-in security role “Infrastructure Administrator” assignments. SCCM RBAC Implementation Troubleshooting Guide ConfigMgr?

3. OSD Manager doesn’t have Access to CreateTask Sequence!

I’ll provide a few tips to resolve some common issues with build-in security role “Operating System Deployment Manager” (OSD Manager) assignments in ConfigMgr 2012. OSD Managers are not able to view “Task Sequence” and are unable to create Task Sequence.

Adaptiva

4.  Clear Required PXE Deployments Option Gotcha

Clear Required PXE Deployments is a regularly used option in SCCM / ConfigMgr. What I recently found is that Operating System Deployment Managers (default security role) are not able to perform the above-mentioned function by right-clicking on a device.

5. DP is Not Visible for Infrastructure Administrator

Recently, I’ve seen another gotcha with RBA. CM 12 administrator has been assigned to the “Infrastructure Administrator” security role along with the correct security scope for his location. However, he or she is not able to view DP that he/she just installed successfully.

6. ConfigMgr 2012 Tip Not Able to Create Requirement for Deployment Type

When “Application Administrator” (Default Security Role comes with CM 2012) tries to ”create requirement” for new app model –> deployment type then he could not find any of the default condition drop-down lists.

Resources

Free SCCM Training Part 1 | 17 Hours Of Latest Technical Content | ConfigMgr Lab HTMD Blog (anoopcnair.com)

How To Disable SCCM Application Deployment | ConfigMgr | MEMCM – HTMD Blog #2 (howtomanagedevices.com)

Author

Anoop is Microsoft MVP! He is a Solution Architect in enterprise client management with more than 20 years of experience (calculation done in 2021) in IT. He is a blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. E writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc…

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.