Security Configuration Overview

Systems Management Server (SMS) grants access to its functionality based on security rights. Configuring SMS security means creating various security rights so that SMS administrators have access to certain functionality and data.

A security right has three parts:

A user or user group
The Windows NT user name or group name to which the security right applies, such as Chris Smith, Administrator, or Power Users. (See About User and User Group Permissions for information about assigning permissions to users and user groups.)
A permission
The type of action that is permitted, such as Read, Create, or Delete.
A security object
The entity on which the permission acts. Security objects can be either a class (such as all collections), or an instance (such as a particular collection).

Not all permissions apply to all security objects. (See About Permissions and Security Objects for the complete list of permissions and the security objects they apply to.)

SMS administrators who do not have permissions for all security objects in the SMS Administrator console will only see those security objects for which they have permissions.

Related Topics

Topic Link

Create a Security Right

Topic Link

Modify a Security Right

Topic Link

Delete a Security Right

Topic Link

About User and User Group Permissions

Topic Link

About Permissions

Topic Link

About Permissions and Security Objects

Topic Link

About Advertisement Security

Topic Link

About Collection and Resource Security

Topic Link

About Crystal Info Security

Topic Link

Security Rights Overview