1. Log on to the computer with an account that is a member of the Operations Manager Administrators role for the Operations Manager 2007 management group.

2. In the Operations console, click the Administration button.

3. In the Administration pane, expand Administration, expand Security, right-click User Roles, point to New User Role, and then click Read-Only Operator.

4. In the Create User Role Wizard displays, on the General page, type a name for the user role in the User role name text box, and then click Add.

5. In the Select User or Groups dialog box, enter the users or groups that you want to assign to the Read-Only Operator user role, and then click OK.

   Important
   Adding a machine account to user role member would allow all services on that computer to have SDK access. It is recommended that you do not add a machine account to any user role.

6. On the General page, type an optional description in the Description text box for the Read-Only Operators user role, and then click Next.

7. On the Group Scope page, expand the list in the Groups pane to individually select one or more object groups, and then click Next.

   Note
   You will need to clear the check box at the root level of the list before you can select any other groups.

8. On the Views page, under Approve views, configure the views that members of the Read-0nly Operators user role can see. If you want to configure a subset of available monitoring views and tasks for the Read-Only Operator user role, click Only views explicitly added to the Approved views, click the desired approved views, and then click Next.

   Note
   If you do not select All views are automatically approved, including views in management packs imported in the future, users assigned this role will not be able to open alert views from within Health Explorer.

9. On the Summary page, check the settings you have made, and then click Create.

Tasks

Concepts