Removing Console Menu item: Manage from the console for a Custom Security Role

Products

• IT Management Suite
• Client Management Suite

Issue/Introduction

When customizing views for a custom role, the Manage menu has been removed but it is still visible when users access the custom role.  Other items have been removed and they no longer appear.

Under Manage there are three items left: Software, Software Catalog and Software Publications

Resolution

Open Security Role Manager (Console > Settings > Security > Security Role Manager)

Role: Select the Role from the Drop Down List that you would like to make changes to.  Caution: Best Practice is to CLONE the role that you want to change and then make changes to the Clone.  Symantec Admins have rights to change Built-In Role properties but this is not recommended.

View: Select the Console Menu

Uncheck READ Item permissions from the following items, if they exist: Manage, then under Manage > Software, Software Catalog and Software Publications.

After removing the READ access, there is one stubborn entry that is still there: Software Catalog.  Though it does not do anything when clicked.

To remove the Software Catalog fully, we need to do the following additional steps in Security Role Manager:

Right-Click on Software Catalog and select Properties: 

Select the Security Tab:

And then select Advanced button in bottom right.  This pulls up the Permissions for Software Catalog.

Select the NT Authority\Authenticated Users, and make a Note on which items are selected in case you need to put them back. 

Then Uncheck all of the Blue check boxes (permissions) for this item:

 

Select NT Authority\System and make the same changes.

Click Save Changes, and close the Permissions for: Software Catalog window.  Close Security Role Manager.

Refresh the browser on your Custom Security Role, and you should see the Manage button is no longer visible to this custom role.