Read Only Access

Creating a Read-Only Role in Recast Management Server







Adding a Custom Role Template

You can add a permissions template to Recast Management Server by running a simple SQL query against your RecastManagementServerDB.
SQLNewRMSReadOnlyAccessRole.txt

Permission list

The user will be granted read-only access to all of the in-console dashboards, RCT actions, and web dashboards/trends.

Active Directory GetADComputer
Active Directory GetADComputerWithLAPSData
Active Directory GetADComputers
Active DirectoryGetADComputersBitLockerStatus
Active DirectoryGetADComputersInGroup
Active DirectoryGetADContainers
Active DirectoryGetADGroup
Active DirectoryGetADGroups
Active DirectoryGetADGroupsInGroup
Active DirectoryGetADOUs
Active DirectoryGetADUser
Active DirectoryGetADUsers
Active DirectoryGetADUsersInGroup
Active DirectoryGetAccountGroupMembership
Active DirectoryGetBitLockerRecoveryData
Active DirectoryGetGroupMembers
Active DirectoryGetPrimaryGroupForAccount
Active DirectoryIsAccountEnabled
Active DirectorySearchADComputers
Active DirectorySearchADGroups
Active DirectorySearchADUsers


AdministrationGetAllSettings
AdministrationGetActionExecutionGroup
AdministrationGetActiveDirectoryServiceConnection
AdministrationGetExecutionHistory
AdministrationGetExecutionHistoryForJobID
AdministrationGetMemcmServiceConnection


BitLockerGetBitLockerStatus
BitLockerGetRecoveryPasswordFromDevice


ConfigMgr Client GetConfigurationBaselines
ConfigMgr Client GetDeployedPrograms
ConfigMgr ClientGetDeployedTaskSequences
ConfigMgr ClientGetDeviceId
ConfigMgr ClientGetServiceWindows
ConfigMgr ClientGetUserPolicyEndpoint
ConfigMgr ClientMissingSoftwareUpdates
ConfigMgr ClientPackageInformation


ConfigMgrServerGetAccounts
ConfigMgrServerGetActiveAlerts
ConfigMgrServerGetActiveDirectoryForests
ConfigMgrServerGetAdministrativeUsers
ConfigMgrServerGetAlertSubscriptions
ConfigMgrServerGetAllAlerts
ConfigMgrServerGetAllCollections
ConfigMgrServerGetAllContentStatus
ConfigMgrServerGetAllDeploymentTypes
ConfigMgrServerGetAllDeviceCollections
ConfigMgrServerGetAllDevices
ConfigMgrServerGetAllDevicesInOu
ConfigMgrServerGetAllDistributedContent
ConfigMgrServerGetAllSoftwareUpdates
ConfigMgrServerGetAllUserCollections
ConfigMgrServerGetAllUsers
ConfigMgrServerGetApplicationByModelId
ConfigMgrServerGetApplicationRevisions
ConfigMgrServerGetApplications
ConfigMgrServerGetApplicationsDeployedToUsers
ConfigMgrServerGetApprovalRequests
ConfigMgrServerGetAssetIntelligenceCatalog
ConfigMgrServerGetAssetIntelligenceHardwareRequirements
ConfigMgrServerGetAssetIntelligenceInventoriedSoftware
ConfigMgrServerGetAutomaticDeploymentRules
ConfigMgrServerGetBaseboardInformation
ConfigMgrServerGetBootImages
ConfigMgrServerGetBoundaries
ConfigMgrServerGetBoundaryGroups
ConfigMgrServerGetCategoryInstanceById
ConfigMgrServerGetCertificates
ConfigMgrServerGetChassisInformation
ConfigMgrServerGetClientOperations
ConfigMgrServerGetClientSettings
ConfigMgrServerGetCollectionFolderInformation
ConfigMgrServerGetCollectionVariablesforDevice
ConfigMgrServerGetCollectionsforDevice
ConfigMgrServerGetCollectionsforUser
ConfigMgrServerGetCompliantUpdateStatuses
ConfigMgrServerGetComponentStatus
ConfigMgrServerGetComputerSystemInformation
ConfigMgrServerGetComputerSystemProductInformation
ConfigMgrServerGetComputerWarranty
ConfigMgrServerGetComputersWithX64LapsClient
ConfigMgrServerGetComputersWithX86LapsClient
ConfigMgrServerGetComputersWithoutLapsClient
ConfigMgrServerGetConfigurationBaselines
ConfigMgrServerGetConfigurationItems
ConfigMgrServerGetConflictingRecords
ConfigMgrServerGetContentStatus
ConfigMgrServerGetDPGroupTaskSequenceContent
ConfigMgrServerGetDPGroupsWithMembers
ConfigMgrServerGetDeployedApplicationsForUser
ConfigMgrServerGetDeploymentPackages
ConfigMgrServerGetDeploymentTypesForApplication
ConfigMgrServerGetDeployments
ConfigMgrServerGetDeviceCollectionFolders
ConfigMgrServerGetDeviceCollectionInformationforDevice
ConfigMgrServerGetDeviceCollectionMembers
ConfigMgrServerGetDeviceCollectionsinFolder
ConfigMgrServerGetDeviceCountForLicensing
ConfigMgrServerGetDevicesByCreationDate
ConfigMgrServerGetDevicesByMACAddress
ConfigMgrServerGetDevicesBySmBiosGuid
ConfigMgrServerGetDevicesInCollectionScope
ConfigMgrServerGetDevicesInSiteScope
ConfigMgrServerGetDiscoveryMethods
ConfigMgrServerGetDistributedSoftwareUpdates
ConfigMgrServerGetDistributionPointConfigurationStatus
ConfigMgrServerGetDistributionPointContent
ConfigMgrServerGetDistributionPointGroupStatus
ConfigMgrServerGetDistributionPointGroupStatusforPackage
ConfigMgrServerGetDistributionPointGroups
ConfigMgrServerGetDistributionPointStatusforPackage
ConfigMgrServerGetDistributionPoints
ConfigMgrServerGetDistributionPointsInDistributionPointGroup
ConfigMgrServerGetDriverPackages
ConfigMgrServerGetDrivers
ConfigMgrServerGetEndpointProtectionAntimalwarePolicies
ConfigMgrServerGetEndpointProtectionFirewallPolicies
ConfigMgrServerGetFailedContentOnDistributionPoint
ConfigMgrServerGetGlobalConditions
ConfigMgrServerGetInstalledSoftwareUpdates
ConfigMgrServerGetMachinesWithCmBlmKeys
ConfigMgrServerGetMalwareDetected
ConfigMgrServerGetMigrationJobs
ConfigMgrServerGetNonCompliantUpdateStatuses
ConfigMgrServerGetObjectContainerItems
ConfigMgrServerGetOperatingSystemImages
ConfigMgrServerGetPackages
ConfigMgrServerGetPowerConfigurationsforComputer
ConfigMgrServerGetQueries
ConfigMgrServerGetRequiredSoftwareUpdates
ConfigMgrServerGetScopeMemberships
ConfigMgrServerGetSecurityRoles
ConfigMgrServerGetSecurityScopes
ConfigMgrServerGetServersandSiteSystemRoles
ConfigMgrServerGetServiceWindowsforComputer
ConfigMgrServerGetSiteDeviceCollectionsWithFolders
ConfigMgrServerGetSiteStatus
ConfigMgrServerGetSites
ConfigMgrServerGetSoftwareMeteringRules
ConfigMgrServerGetSoftwareUpdateGroups
ConfigMgrServerGetSoftwareUpdatesInGroup
ConfigMgrServerGetStatusMessageQueries
ConfigMgrServerGetSystemBiosInformation
ConfigMgrServerGetSystemConsoleUsageData
ConfigMgrServerGetSystemFirmwareStatus
ConfigMgrServerGetSystemOperatingSystemInformation
ConfigMgrServerGetSystemsBitLockerEncryptionStatus
ConfigMgrServerGetTaskSequenceContent
ConfigMgrServerGetTaskSequences
ConfigMgrServerGetUnknownDevices
ConfigMgrServerGetUserCollectionFolders
ConfigMgrServerGetUserCollectionsinFolder
ConfigMgrServerGetUserDevices
ConfigMgrServerGetUserDevicesByUsername
ConfigMgrServerGetUserStateMigrations
ConfigMgrServerGetVirtualHardDisks
ConfigMgrServerGetWarrantyInformation


EndpointInsightsOpenRecastEiReportViewer


FilesystemGetDirectoryEntries
FilesystemGetDirectoryEntries
FilesystemGetSecurityByName


InstalledSoftwareListSoftware


KioskManagerListProfiles


LocalActionsActiveDirectoryCleanupTool


MBAMGetMBAMCompliance
MBAMGetMBAMComplianceForAllMachines
MBAMGetMachinesWithMBAMKeys
MBAMGetMachinesWithMBAMKeys_v2
MBAMGetRecoveryKeysForDevice
MBAMGetTPMHash
MBAMGetTPMHashForUser


NetworkPingComputer


RegistryGetValue
RegistryListHives
RegistryListSubkeys
RegistryListValues


SCEPGetDefenderExclusions
SCEPGetDefenderStatus


ServicesListServices


SystemInformationGetAllLocalGroupMembers
SystemInformationGetBatteryInformation
SystemInformationGetLoggedInUsers
SystemInformationGetRunningProcesses
SystemInformationGetUserSessions
SystemInformationReadOnly


TaskSchedulerGetTaskResults
TaskSchedulerGetTaskResultsForDate


UnifiedWriteFilterGetFileExclusions
UnifiedWriteFilterGetOverlayConfiguration
UnifiedWriteFilterGetRegistryExclusions
UnifiedWriteFilterGetUnifiedWriteFilterFeatureStatus
UnifiedWriteFilterGetWriteFilterStatus


WindowsSecurityGetAllVirtualizationBasedSecuritySettings
WindowsSecurityGetCredentialGuardSettings
WindowsSecurityGetSecureBootStatus
WindowsSecurityGetSystemGuardSecureLaunchSettings
WindowsSecurityGetTpmStatus
WindowsSecurityGetUefiSecureBootStatus
WindowsSecurityGetVirtualizationBasedSecuritySettings
WindowsSecurityGetWindowsFirewallProfiles
WindowsSecurityGetWindowsFirewallRules


WindowsTaskSchedulerListTasks


WMIReadOnly