When a user is granted access to Right Click Tools with a read-only role, they'll be able to see and use some product features without the ability to make changes to any devices. Read-only access lets users view Right Click Tools actions, console dashboards, web dashboards and dashboard trends, and the audit log. Users given this role will not see permissions, routes, or scopes in the Recast Management Server interface. For the full permission list, see below.
Create a Read-Only Role in Recast Management Server
Add a Custom Role Template
You can add a permissions template to Recast Management Server by running a simple SQL query against your RecastManagementServerDB.
Read-Only Role Permission list
| Active Directory | GetADComputer |
| Active Directory | GetADComputerWithLAPSData |
| Active Directory | GetADComputers |
| Active Directory | GetADComputersBitLockerStatus |
| Active Directory | GetADComputersInGroup |
| Active Directory | GetADContainers |
| Active Directory | GetADGroup |
| Active Directory | GetADGroups |
| Active Directory | GetADGroupsInGroup |
| Active Directory | GetADOUs |
| Active Directory | GetADUser |
| Active Directory | GetADUsers |
| Active Directory | GetADUsersInGroup |
| Active Directory | GetAccountGroupMembership |
| Active Directory | GetBitLockerRecoveryData |
| Active Directory | GetGroupMembers |
| Active Directory | GetPrimaryGroupForAccount |
| Active Directory | IsAccountEnabled |
| Active Directory | SearchADComputers |
| Active Directory | SearchADGroups |
| Active Directory | SearchADUsers |
| Administration | GetAllSettings |
| Administration | GetActionExecutionGroup |
| Administration | GetActiveDirectoryServiceConnection |
| Administration | GetExecutionHistory |
| Administration | GetExecutionHistoryForJobID |
| Administration | GetMemcmServiceConnection |
| BitLocker | GetBitLockerStatus |
| BitLocker | GetRecoveryPasswordFromDevice |
| ConfigMgr Client | GetConfigurationBaselines |
| ConfigMgr Client | GetDeployedPrograms |
| ConfigMgr Client | GetDeployedTaskSequences |
| ConfigMgr Client | GetDeviceId |
| ConfigMgr Client | GetServiceWindows |
| ConfigMgr Client | GetUserPolicyEndpoint |
| ConfigMgr Client | MissingSoftwareUpdates |
| ConfigMgr Client | PackageInformation |
| ConfigMgrServer | GetAccounts |
| ConfigMgrServer | GetActiveAlerts |
| ConfigMgrServer | GetActiveDirectoryForests |
| ConfigMgrServer | GetAdministrativeUsers |
| ConfigMgrServer | GetAlertSubscriptions |
| ConfigMgrServer | GetAllAlerts |
| ConfigMgrServer | GetAllCollections |
| ConfigMgrServer | GetAllContentStatus |
| ConfigMgrServer | GetAllDeploymentTypes |
| ConfigMgrServer | GetAllDeviceCollections |
| ConfigMgrServer | GetAllDevices |
| ConfigMgrServer | GetAllDevicesInOu |
| ConfigMgrServer | GetAllDistributedContent |
| ConfigMgrServer | GetAllSoftwareUpdates |
| ConfigMgrServer | GetAllUserCollections |
| ConfigMgrServer | GetAllUsers |
| ConfigMgrServer | GetApplicationByModelId |
| ConfigMgrServer | GetApplicationRevisions |
| ConfigMgrServer | GetApplications |
| ConfigMgrServer | GetApplicationsDeployedToUsers |
| ConfigMgrServer | GetApprovalRequests |
| ConfigMgrServer | GetAssetIntelligenceCatalog |
| ConfigMgrServer | GetAssetIntelligenceHardwareRequirements |
| ConfigMgrServer | GetAssetIntelligenceInventoriedSoftware |
| ConfigMgrServer | GetAutomaticDeploymentRules |
| ConfigMgrServer | GetBaseboardInformation |
| ConfigMgrServer | GetBootImages |
| ConfigMgrServer | GetBoundaries |
| ConfigMgrServer | GetBoundaryGroups |
| ConfigMgrServer | GetCategoryInstanceById |
| ConfigMgrServer | GetCertificates |
| ConfigMgrServer | GetChassisInformation |
| ConfigMgrServer | GetClientOperations |
| ConfigMgrServer | GetClientSettings |
| ConfigMgrServer | GetCollectionFolderInformation |
| ConfigMgrServer | GetCollectionVariablesforDevice |
| ConfigMgrServer | GetCollectionsforDevice |
| ConfigMgrServer | GetCollectionsforUser |
| ConfigMgrServer | GetCompliantUpdateStatuses |
| ConfigMgrServer | GetComponentStatus |
| ConfigMgrServer | GetComputerSystemInformation |
| ConfigMgrServer | GetComputerSystemProductInformation |
| ConfigMgrServer | GetComputerWarranty |
| ConfigMgrServer | GetComputersWithX64LapsClient |
| ConfigMgrServer | GetComputersWithX86LapsClient |
| ConfigMgrServer | GetComputersWithoutLapsClient |
| ConfigMgrServer | GetConfigurationBaselines |
| ConfigMgrServer | GetConfigurationItems |
| ConfigMgrServer | GetConflictingRecords |
| ConfigMgrServer | GetContentStatus |
| ConfigMgrServer | GetDPGroupTaskSequenceContent |
| ConfigMgrServer | GetDPGroupsWithMembers |
| ConfigMgrServer | GetDeployedApplicationsForUser |
| ConfigMgrServer | GetDeploymentPackages |
| ConfigMgrServer | GetDeploymentTypesForApplication |
| ConfigMgrServer | GetDeployments |
| ConfigMgrServer | GetDeviceCollectionFolders |
| ConfigMgrServer | GetDeviceCollectionInformationforDevice |
| ConfigMgrServer | GetDeviceCollectionMembers |
| ConfigMgrServer | GetDeviceCollectionsinFolder |
| ConfigMgrServer | GetDeviceCountForLicensing |
| ConfigMgrServer | GetDevicesByCreationDate |
| ConfigMgrServer | GetDevicesByMACAddress |
| ConfigMgrServer | GetDevicesBySmBiosGuid |
| ConfigMgrServer | GetDevicesInCollectionScope |
| ConfigMgrServer | GetDevicesInSiteScope |
| ConfigMgrServer | GetDiscoveryMethods |
| ConfigMgrServer | GetDistributedSoftwareUpdates |
| ConfigMgrServer | GetDistributionPointConfigurationStatus |
| ConfigMgrServer | GetDistributionPointContent |
| ConfigMgrServer | GetDistributionPointGroupStatus |
| ConfigMgrServer | GetDistributionPointGroupStatusforPackage |
| ConfigMgrServer | GetDistributionPointGroups |
| ConfigMgrServer | GetDistributionPointStatusforPackage |
| ConfigMgrServer | GetDistributionPoints |
| ConfigMgrServer | GetDistributionPointsInDistributionPointGroup |
| ConfigMgrServer | GetDriverPackages |
| ConfigMgrServer | GetDrivers |
| ConfigMgrServer | GetEndpointProtectionAntimalwarePolicies |
| ConfigMgrServer | GetEndpointProtectionFirewallPolicies |
| ConfigMgrServer | GetFailedContentOnDistributionPoint |
| ConfigMgrServer | GetGlobalConditions |
| ConfigMgrServer | GetInstalledSoftwareUpdates |
| ConfigMgrServer | GetMachinesWithCmBlmKeys |
| ConfigMgrServer | GetMalwareDetected |
| ConfigMgrServer | GetMigrationJobs |
| ConfigMgrServer | GetNonCompliantUpdateStatuses |
| ConfigMgrServer | GetObjectContainerItems |
| ConfigMgrServer | GetOperatingSystemImages |
| ConfigMgrServer | GetPackages |
| ConfigMgrServer | GetPowerConfigurationsforComputer |
| ConfigMgrServer | GetQueries |
| ConfigMgrServer | GetRequiredSoftwareUpdates |
| ConfigMgrServer | GetScopeMemberships |
| ConfigMgrServer | GetSecurityRoles |
| ConfigMgrServer | GetSecurityScopes |
| ConfigMgrServer | GetServersandSiteSystemRoles |
| ConfigMgrServer | GetServiceWindowsforComputer |
| ConfigMgrServer | GetSiteDeviceCollectionsWithFolders |
| ConfigMgrServer | GetSiteStatus |
| ConfigMgrServer | GetSites |
| ConfigMgrServer | GetSoftwareMeteringRules |
| ConfigMgrServer | GetSoftwareUpdateGroups |
| ConfigMgrServer | GetSoftwareUpdatesInGroup |
| ConfigMgrServer | GetStatusMessageQueries |
| ConfigMgrServer | GetSystemBiosInformation |
| ConfigMgrServer | GetSystemConsoleUsageData |
| ConfigMgrServer | GetSystemFirmwareStatus |
| ConfigMgrServer | GetSystemOperatingSystemInformation |
| ConfigMgrServer | GetSystemsBitLockerEncryptionStatus |
| ConfigMgrServer | GetTaskSequenceContent |
| ConfigMgrServer | GetTaskSequences |
| ConfigMgrServer | GetUnknownDevices |
| ConfigMgrServer | GetUserCollectionFolders |
| ConfigMgrServer | GetUserCollectionsinFolder |
| ConfigMgrServer | GetUserDevices |
| ConfigMgrServer | GetUserDevicesByUsername |
| ConfigMgrServer | GetUserStateMigrations |
| ConfigMgrServer | GetVirtualHardDisks |
| ConfigMgrServer | GetWarrantyInformation |
| EndpointInsights | OpenRecastEiReportViewer |
| Filesystem | GetDirectoryEntries |
| Filesystem | GetDirectoryEntries |
| Filesystem | GetSecurityByName |
| InstalledSoftware | ListSoftware |
| KioskManager | ListProfiles |
| LocalActions | ActiveDirectoryCleanupTool |
| MBAM | GetMBAMCompliance |
| MBAM | GetMBAMComplianceForAllMachines |
| MBAM | GetMachinesWithMBAMKeys |
| MBAM | GetMachinesWithMBAMKeys_v2 |
| MBAM | GetRecoveryKeysForDevice |
| MBAM | GetTPMHash |
| MBAM | GetTPMHashForUser |
| Network | PingComputer |
| Registry | GetValue |
| Registry | ListHives |
| Registry | ListSubkeys |
| Registry | ListValues |
| SCEP | GetDefenderExclusions |
| SCEP | GetDefenderStatus |
| Services | ListServices |
| SystemInformation | GetAllLocalGroupMembers |
| SystemInformation | GetBatteryInformation |
| SystemInformation | GetLoggedInUsers |
| SystemInformation | GetRunningProcesses |
| SystemInformation | GetUserSessions |
| SystemInformation | ReadOnly |
| TaskScheduler | GetTaskResults |
| TaskScheduler | GetTaskResultsForDate |
| UnifiedWriteFilter | GetFileExclusions |
| UnifiedWriteFilter | GetOverlayConfiguration |
| UnifiedWriteFilter | GetRegistryExclusions |
| UnifiedWriteFilter | GetUnifiedWriteFilterFeatureStatus |
| UnifiedWriteFilter | GetWriteFilterStatus |
| WindowsSecurity | GetAllVirtualizationBasedSecuritySettings |
| WindowsSecurity | GetCredentialGuardSettings |
| WindowsSecurity | GetSecureBootStatus |
| WindowsSecurity | GetSystemGuardSecureLaunchSettings |
| WindowsSecurity | GetTpmStatus |
| WindowsSecurity | GetUefiSecureBootStatus |
| WindowsSecurity | GetVirtualizationBasedSecuritySettings |
| WindowsSecurity | GetWindowsFirewallProfiles |
| WindowsSecurity | GetWindowsFirewallRules |
| WindowsTaskScheduler | ListTasks |
| WMI | ReadOnly |