Question
What kind of rights can I delegate to my users when SVS/SWV is on their computer?  I only want them to be able to perform a few of the commands on SVS/SWV.

Answer

In order for a user to manipulate the SVS/SWV system or layer data through SVSAdmin, that user must be an administrator. There are two exceptions: the rights to activate and deactivate can be delegated. 

For SVS 2.0 through SWV 6.1 build 4113:

• Users that have Read access to a key named HKLM\System\Altiris\FSL\Rights\Activate will be able to activate layers via SVSCMD or SVSAdmin.
• Users that have Read access to a key named HKLM\System\Altiris\FSL\Rights\Deactivate will be able to deactivate layers via SVSCMD or SVSAdmin.
• Users that have rights to change the permissions on these keys will be able to modify these privileges for other users.

For SWV 6.1 build 5104 and higher :

• Users that have Read access to a key named HKLM\System\CurrentControlSet\Services\FSLX\Parameters\FSL\Rights\Activate will be able to activate layers via SVSCMD or SVSAdmin.
• Users that have Read access to a key named HKLM\System\CurrentControlSet\Services\FSLX\Parameters\FSL\Rights\Deactivate will be able to deactivate layers via SVSCMD or SVSAdmin.
• Users that have rights to change the permissions on these keys will be able to modify these privileges for other users.

The other functionalities (Import, Delete, Reset, Auto Activate,etc.) cannot be delegated and can only be performed by Administrators on the system.