Level 1 Worker with enabled required privileges and permissions can’t create Quick Delivery task or Managed Delivery Policy

Products

• Software Management Solution

Issue/Introduction

Level 1 Worker with enabled required privileges and permissions can’t create Quick Delivery task or Managed Delivery Policy.

Cause

Security is not configured correctly.

Resolution

Currently the correct set of privileges/permissions for Symantec Level 1 Worker user for creating Managed Delivery Policy and Quick Delivery Task looks this way:
 

1. In Account Management > Roles page > Symantec Level 1 Workers > Privileges tab are enabled:
   1. all privileges under ‘Management Privileges’
   2. “Create Software Deliveries” privilege under ‘Software Management’
   3. “Managed Software Delivery” and “Quick Delivery Task” privileges  under second ‘Right Click Menu – Actions’
2. In Security Role Manager > Symantec Level 1 Worker (for 7.5 see below section for alternate steps) 
   1. Enable  “Read/Write” permissions for Policies folder
   2. Enable  “Read/Write” permissions for Tasks folder
   3. Enable  “Read/Write” permissions for Resource Management folder
   4. Click Edit button to add more settings.  In Items Selector window:
      1. Select ‘Managed Delivery Settings’ under Settings > Software folder.
      2. Select ‘Inventory Rule’ under Settings > Notification Server > Resource and Data Class Settings > Data Classes > Inventory Rule Management
      3. Select ‘Command Line Requires Package’ under Settings > Notification Server > Resource and Data Class Settings > Resource Associations > Software Management
      4. Click Save Changes to add selected items.
   5. Enable  ‘Read’ and ‘Read Resource Data’ permissions for added ‘Inventory Rule’ item located under Settings > Notification Server > Resource and Data Class Settings > Data Classes > Inventory Rule Management folder
   6. Enable ‘Read’ and ‘Read Resource Data’ permissions for ‘Software Component’ item located under Settings > Notification Server > Resource and Data Class Settings > Data Classes > Software Management folder
   7. Ensure that ‘Read’ permission is enabled for ‘Command Line Requires Package’ item located under  Settings > Notification Server > Resource and Data Class Settings > Resource Associations > Software Management folder

For 7.5, section 2 should be followed as shown:
2. In Security Role Manager > Symantec Level 1 Worker
      a. Enable  “Read/Write” permissions for Policies folder
      b. Enable  “Read/Write” permissions for Tasks folder
      c. Enable  “Read/Write” permissions for Resource Management folder
      d. Select ‘Settings’ view and click Add button to add more settings.  In
         ‘Add Permission’ window:
         i. Select ‘Managed Delivery Settings’ under Settings > Software folder.
         ii. Select ‘Inventory Rule’ under Settings > Notification Server > Resource and Data Class Settings > Data Classes > Inventory Rule Management.
         iii. Click Ok to add the selected items.
      e. Enable  ‘Read’ and ‘Read Resource Data’ permissions for added ‘Inventory Rule’ item located under Settings > Notification Server > Resource and Data Class Settings > Data Classes > Inventory Rule Management folder
      f. Ensure that ‘Read’ and ‘Read Resource Data’ permissions are enabled for ‘Software Component’ item located under Settings > Notification Server > Resource and Data Class Settings > Data Classes > Software Management folder
      g. Ensure that ‘Read’ permission is enabled for ‘Command Line Requires Package’ item located under  Settings > Notification Server > Resource and Data Class Settings > Resource Associations > Software Management folder

With all that enabled privileges and permissions Symantec Level 1 Worker  can create Managed Delivery policy via:

• Wizard launched from Actions > Software > Managed Software Delivery…
• Via right click menu on software in Software view > Actions > Managed Software Delivery.
• Via drag’n’dropping a software onto selected computer. Need to enable “Ensure software stays installed using a policy” checkbox in ‘Deliver Software’ window appeared after drag’n’drop.

            

With all that enabled privileges and permissions Symantec Level 1 Worker can create Quick Delivery Task via:

• Wizard launched from Actions > Software > Software Delivery Task…
• Via right click menu on software in Software view > Actions > Quick Delivery Task
• Via drag’n’dropping a software onto selected computer. Need to leave disabled “Ensure software stays installed using a policy” checkbox in ‘Deliver Software’ window appeared after drag’n’drop.

Note: Creating Managed Delivery policy and Quick Delivery Task is not available via right click menu on Polices/ Tasks folder in Polices and Jobs/Tasks view.  There is no ‘New’ context menu item and this is applicable  for any folder in Policies and Tasks trees in Polices and Jobs/Tasks view.

Applies To

Software Management 7.1, 7.5