Appendix A - List of Operations in Operations Manager 2007

Applies To: Operations Manager 2007 R2, Operations Manager 2007 SP1

This appendix provides a list of the operations in Operations ManagerĀ 2007 that are available for each profile.

Report Operator

The Report Operator profile includes a set of privileges designed for users who need access to reports. A role based on the Report Operator profile grants members the ability to view reports according to their configured scope.

Retrieve the instance of the data warehouse for the management group

Write to favorite reports

Delete favorite reports

Read favorite reports

Update favorite reports

Read reports

Run reports

Read-Only Operator

The Read-Only Operator profile includes a set of privileges designed for users who need read-only access to alerts and views. A role based on the Read-Only Operators profile grants members the ability to view alerts and access views according to their configured scope.

Read alerts

Retrieve the instance of the data warehouse for the management group

Read state of a resolution

Read instance of a connector

Read console tasks

Enumerate diagnostic objects

Enumerate the results of diagnostics

Enumerate discovery objects as defined in a management pack

Read discovery rules

Read events

Write to favorite console tasks

Delete favorite console tasks

Enumerate favorite console tasks

Update favorite console tasks

Write favorite views

Delete favorite views

Enumerate favorite views

Update favorite views

Enumerate monitoring objects

Enumerate monitoring classes

Enumerate monitoring relationship classes

Enumerate management packs

Enumerate monitor types

Enumerate module types

Enumerate monitors

Enumerate overrides

Enumerate performance data

Enumerate discovery objects as defined in a management pack

Enumerate the status of past recoveries

Enumerate relationship between monitored objects

Enumerate rules

Enumerate saved searches

Update saved searches

Write to saved searches

Delete saved searches

Enumerate state

Allows access to connected management groups

Enumerate views

Enumerate view types

Operator

The Operator profile includes a set of privileges designed for users who need access to alerts, views, and tasks. A role based on the Operators profile grants members the ability to interact with alerts, run tasks, and access views according to their configured scope. The Operator profile contains all of the privileges found in the Read-Only Operator profile in addition to those listed below.

Update alerts

Run diagnostics

Create favorite tasks

Delete favorite tasks

Enumerate favorite tasks

Update favorite tasks

Run recovery routines

Update maintenance mode settings

Enumerate notification actions

Delete notification actions

Update notification actions

Enumerate notification endpoints

Enumerate notification recipients

Delete notification recipients

Update notification recipients

Enumerate notification subscriptions

Delete notification subscriptions

Update notification subscriptions

Enumerate tasks

Enumerate task status

Run tasks

Advanced Operator

The Advanced Operator profile includes a set of privileges designed for users who need access to limited tweaking of monitoring configurations in addition to the Operators privileges. A role based on the Advanced Operators profile grants members the ability to override the configuration of rules and monitors for specific targets or groups of targets within the configured scope. The Advanced Operator profile contains all of the privileges found in the Operator and Read-Only Operator profiles in addition to those listed below.

Update management packs

Enumerate templates

Author

The Author profile includes a set of privileges designed for authoring monitoring configurations. A role based on the Authors profile grants members the ability to create, edit, and delete monitoring configuration (tasks, rules, monitors, and views) within the configured scope. For convenience, Authors can also be configured to have Advanced Operator privileges scoped by group. The Author profile contains all of the privileges found in the Advanced Operator, Operator, and Read-Only Operator profiles in addition to those listed below.

Create management packs

Delete management packs

Enumerate Run As Profiles

Administrator

The Administrator profile includes full privileges to Operations Manager. No scoping of the Administrator profile is supported. The Administrator profile contains all of the privileges found in the Author, Advanced Operator, Operator, and Read-Only Operator profiles in addition to those listed below.

Create a resolution state

Delete a resolution state

Update a resolution state

Deploy an agent

Repair or update an installed agent

Uninstall an agent

Enumerate agent settings

Update agent settings

Enumerate agents

Start or stop managing computers or devices via a proxy health service

Enumerate computers or devices managed via a proxy health service

Insert a new instance of a computer or device

Delete an instance of a computer or device

Run discovery task

Create events

Enumerate global settings

Update global settings

Export management packs

Enumerate management servers

Delete notification endpoint

Update notification endpoint

Create performance data

Create Run As Accounts

Delete Run As Accounts

Enumerate Run As Accounts

Update Run As Accounts

Create mappings between Run As Accounts and Run As Profiles

Delete mappings between Run As Accounts and Run As Profiles

Enumerate mappings between Run As Accounts and Run As Profiles

Update mappings between Run As Accounts and Run As Profiles

Create connected management groups

Delete connected management groups

Enumerate user roles

Delete user roles

Update user roles

Write favorite reports

Delete favorite reports

Read favorite reports

Update favorite reports

Read reports

Run reports

Report Security Administrator

The Report Security Administrator profile includes a set of privileges designed to enable the integration of SQL Server Reporting Services security with Operations Manager.

Export management packs

Enumerate classes as defined in the management packs

Enumerate management packs

Run reports

Enumerate rules