Assign a Read Only Access Role

Read-only access lets users view Right Click Tools actions, console dashboards, web dashboards and trends, and the audit log, without the ability to make changes to any devices. Users given this role will not see permissions, routes, or scopes in the Recast Management Server interface. For the full permission list, see below.

You can add a permissions template to Recast Management Server by running a simple SQL query against your RecastManagementServerDB.

Template (updated November 9, 2023): RMS Read-Only Role Query.txt

Video Walkthrough







Read-Only Role Permission List

Active Directory 
Active Directory Cleanup Tool
Get AD Computer
Get AD Computer With LAPS Data
Get AD Computers
Get AD Computers BitLocker Status
Get AD Computers In Group
Get AD Containers
Get AD Group
Get AD Groups
Get AD Groups In Group
Get AD OUs
Get AD User
Get AD Users
Get AD Users In Group
Get Account Group Membership
Get BitLocker Recovery Data
Get Group Members
Get Primary Group For Account
Is Account Enabled
Search AD Computers
Search AD Groups
Search AD Users


Administration
Get All Settings
Get Action Execution Group
Get Active Directory Service Connection
Get Execution History
Get Execution History For Job ID
Get MEMCM Service Connection


BitLocker
Get BitLocker Status
Get Recovery Password From Device


ConfigMgr Client 
Get Configuration Baselines
Get Deployed Programs
Get Deployed Task Sequences
Get Device ID
Get Service Windows
Get User Policy Endpoint
Missing Software Updates
Package Information


ConfigMgr Server






Get Accounts
Get Active Alerts
Get Active Directory Forests
Get Administrative Users
Get Alert Subscriptions
Get All Alerts
Get All Collections
Get All Content Status
Get All Deployment Types
Get All Device Collections
Get All Devices
Get All Devices In OU
Get All Distributed Content
Get All Software Updates
Get All User Collections
Get All Users
Get Application By Model ID
Get Application Revisions
Get Applications
Get Applications Deployed To Users
Get Approval Requests
Get Asset Intelligence Catalog
Get Asset Intelligence Hardware Requirements
Get Asset Intelligence Inventoried Software
Get Automatic Deployment Rules
Get Baseboard Information
Get Boot Images
Get Boundaries
Get Boundary Groups
Get Category Instance By ID
Get Certificates
Get Chassis Information
Get Client Operations
Get Client Settings
Get Collection Folder Information
Get Collection Variables for Device
Get Collections for Device
Get Collections for User
Get Compliant Update Statuses
Get Component Status
Get Computer System Information
Get Computer System Product Information
Get Computer Warranty
Get Computers With X64 Laps Client
Get Computers With X86 Laps Client
Get Computers Without Laps Client
Get Configuration Baselines
Get Configuration Items
Get Conflicting Records
Get Content Status
Get DP Group Task Sequence Content
Get DP Groups With Members
Get Deployed Applications For User
Get Deployment Packages
Get Deployment Types For Application
Get Deployments
Get Device Collection Folders
Get Device Collection Information for Device
Get Device Collection Members
Get Device Collections in Folder
Get Device Count For Licensing
Get Devices By Creation Date
Get Devices By MAC Address
Get Devices By Sm Bios Guid
Get Devices In Collection Scope
Get Devices In Site Scope
Get Discovery Methods
Get Distributed Software Updates
Get Distribution Point Configuration Status
Get Distribution Point Content
Get Distribution Point Group Status
Get Distribution Point Group Status for Package
Get Distribution Point Groups
Get Distribution Point Status for Package
Get Distribution Points
Get Distribution Points In Distribution Point Group
Get Driver Packages
Get Drivers
Get Endpoint Protection Antimalware Policies
Get Endpoint Protection Firewall Policies
Get Failed Content On Distribution Point
Get Global Conditions
Get Installed Software Updates
Get Machines With Cm Blm Keys
Get Malware Detected
Get Migration Jobs
Get Non Compliant Update Statuses
Get Object Container Items
Get Operating System Images
Get Packages
Get Power Configurations for Computer
Get Queries
Get Required Software Updates
Get Scope Memberships
Get Security Roles
Get Security Scopes
Get Servers and Site System Roles
Get Service Windows for Computer
Get Site Device Collections With Folders
Get Site Status
Get Sites
Get Software Metering Rules
Get Software Update Groups
Get Software Updates In Group
Get Status Message Queries
Get System Bios Information
Get System Console Usage Data
Get System Firmware Status
Get System Operating System Information
Get Systems BitLocker Encryption Status
Get Task Sequence Content
Get Task Sequences
Get Unknown Devices
Get User Collection Folders
Get User Collections in Folder
Get User Devices
Get User Devices By Username
Get User State Migrations
Get Virtual Hard Disks
Get Warranty Information


Endpoint InsightsOpen Recast EI Report Viewer


Filesystem
Get Directory Entries
Get Directory Entries
Get Security By Name


Installed SoftwareList Software


Kiosk ManagerList Profiles


Local ActionsActive Directory Cleanup Tool


MBAM
Get MBAM Compliance
Get MBAM Compliance For All Machines
Get Machines With MBAM Keys
Get Machines With MBAM Keys_v2
Get Recovery Keys For Device
Get TPM Hash
Get TPM Hash For User


NetworkPing Computer


Registry
Get Value
List Hives
List Subkeys
List Values


SCEPGet Defender Exclusions

Get Defender Status


ServicesList Services


System Information
Get All Local Group Members
Get Battery Information
Get Logged In Users
Get Running Processes
Get User Sessions
Read Only


Task SchedulerGet Task Results

Get Task Results For Date


Unified Write Filter
Get File Exclusions
Get Overlay Configuration
Get Registry Exclusions
Get Unified Write Filter Feature Status
Get Write Filter Status


Windows Security
Get All Virtualization Based Security Settings
Get Credential Guard Settings
Get Secure Boot Status
Get System Guard Secure Launch Settings
Get TPM Status
Get UEFI Secure Boot Status
Get Virtualization Based Security Settings
Get Windows Firewall Profiles
Get Windows Firewall Rules


Windows Task SchedulerList Tasks


WMIRead Only




Copyright © 2023 Recast Software, LLC. All rights reserved.