Read-only access lets users view Right Click Tools actions, console dashboards, web dashboards and trends, and the audit log, without the ability to make changes to any devices. Users given this role will not see permissions, routes, or scopes in the Recast Management Server interface. For the full permission list, see below.
You can add a permissions template to Recast Management Server by running a simple SQL query against your RecastManagementServerDB.
Template (updated August 24, 2023): RMS Read-Only Role Query
Video Walkthrough
Read-Only Role Permission list
| Active Directory | GetADComputer |
| Active Directory | GetADComputerWithLAPSData |
| Active Directory | GetADComputers |
| Active Directory | GetADComputersBitLockerStatus |
| Active Directory | GetADComputersInGroup |
| Active Directory | GetADContainers |
| Active Directory | GetADGroup |
| Active Directory | GetADGroups |
| Active Directory | GetADGroupsInGroup |
| Active Directory | GetADOUs |
| Active Directory | GetADUser |
| Active Directory | GetADUsers |
| Active Directory | GetADUsersInGroup |
| Active Directory | GetAccountGroupMembership |
| Active Directory | GetBitLockerRecoveryData |
| Active Directory | GetGroupMembers |
| Active Directory | GetPrimaryGroupForAccount |
| Active Directory | IsAccountEnabled |
| Active Directory | SearchADComputers |
| Active Directory | SearchADGroups |
| Active Directory | SearchADUsers |
| Administration | GetAllSettings |
| Administration | GetActionExecutionGroup |
| Administration | GetActiveDirectoryServiceConnection |
| Administration | GetExecutionHistory |
| Administration | GetExecutionHistoryForJobID |
| Administration | GetMemcmServiceConnection |
| BitLocker | GetBitLockerStatus |
| BitLocker | GetRecoveryPasswordFromDevice |
| ConfigMgr Client | GetConfigurationBaselines |
| ConfigMgr Client | GetDeployedPrograms |
| ConfigMgr Client | GetDeployedTaskSequences |
| ConfigMgr Client | GetDeviceId |
| ConfigMgr Client | GetServiceWindows |
| ConfigMgr Client | GetUserPolicyEndpoint |
| ConfigMgr Client | MissingSoftwareUpdates |
| ConfigMgr Client | PackageInformation |
| ConfigMgrServer | GetAccounts |
| ConfigMgrServer | GetActiveAlerts |
| ConfigMgrServer | GetActiveDirectoryForests |
| ConfigMgrServer | GetAdministrativeUsers |
| ConfigMgrServer | GetAlertSubscriptions |
| ConfigMgrServer | GetAllAlerts |
| ConfigMgrServer | GetAllCollections |
| ConfigMgrServer | GetAllContentStatus |
| ConfigMgrServer | GetAllDeploymentTypes |
| ConfigMgrServer | GetAllDeviceCollections |
| ConfigMgrServer | GetAllDevices |
| ConfigMgrServer | GetAllDevicesInOu |
| ConfigMgrServer | GetAllDistributedContent |
| ConfigMgrServer | GetAllSoftwareUpdates |
| ConfigMgrServer | GetAllUserCollections |
| ConfigMgrServer | GetAllUsers |
| ConfigMgrServer | GetApplicationByModelId |
| ConfigMgrServer | GetApplicationRevisions |
| ConfigMgrServer | GetApplications |
| ConfigMgrServer | GetApplicationsDeployedToUsers |
| ConfigMgrServer | GetApprovalRequests |
| ConfigMgrServer | GetAssetIntelligenceCatalog |
| ConfigMgrServer | GetAssetIntelligenceHardwareRequirements |
| ConfigMgrServer | GetAssetIntelligenceInventoriedSoftware |
| ConfigMgrServer | GetAutomaticDeploymentRules |
| ConfigMgrServer | GetBaseboardInformation |
| ConfigMgrServer | GetBootImages |
| ConfigMgrServer | GetBoundaries |
| ConfigMgrServer | GetBoundaryGroups |
| ConfigMgrServer | GetCategoryInstanceById |
| ConfigMgrServer | GetCertificates |
| ConfigMgrServer | GetChassisInformation |
| ConfigMgrServer | GetClientOperations |
| ConfigMgrServer | GetClientSettings |
| ConfigMgrServer | GetCollectionFolderInformation |
| ConfigMgrServer | GetCollectionVariablesforDevice |
| ConfigMgrServer | GetCollectionsforDevice |
| ConfigMgrServer | GetCollectionsforUser |
| ConfigMgrServer | GetCompliantUpdateStatuses |
| ConfigMgrServer | GetComponentStatus |
| ConfigMgrServer | GetComputerSystemInformation |
| ConfigMgrServer | GetComputerSystemProductInformation |
| ConfigMgrServer | GetComputerWarranty |
| ConfigMgrServer | GetComputersWithX64LapsClient |
| ConfigMgrServer | GetComputersWithX86LapsClient |
| ConfigMgrServer | GetComputersWithoutLapsClient |
| ConfigMgrServer | GetConfigurationBaselines |
| ConfigMgrServer | GetConfigurationItems |
| ConfigMgrServer | GetConflictingRecords |
| ConfigMgrServer | GetContentStatus |
| ConfigMgrServer | GetDPGroupTaskSequenceContent |
| ConfigMgrServer | GetDPGroupsWithMembers |
| ConfigMgrServer | GetDeployedApplicationsForUser |
| ConfigMgrServer | GetDeploymentPackages |
| ConfigMgrServer | GetDeploymentTypesForApplication |
| ConfigMgrServer | GetDeployments |
| ConfigMgrServer | GetDeviceCollectionFolders |
| ConfigMgrServer | GetDeviceCollectionInformationforDevice |
| ConfigMgrServer | GetDeviceCollectionMembers |
| ConfigMgrServer | GetDeviceCollectionsinFolder |
| ConfigMgrServer | GetDeviceCountForLicensing |
| ConfigMgrServer | GetDevicesByCreationDate |
| ConfigMgrServer | GetDevicesByMACAddress |
| ConfigMgrServer | GetDevicesBySmBiosGuid |
| ConfigMgrServer | GetDevicesInCollectionScope |
| ConfigMgrServer | GetDevicesInSiteScope |
| ConfigMgrServer | GetDiscoveryMethods |
| ConfigMgrServer | GetDistributedSoftwareUpdates |
| ConfigMgrServer | GetDistributionPointConfigurationStatus |
| ConfigMgrServer | GetDistributionPointContent |
| ConfigMgrServer | GetDistributionPointGroupStatus |
| ConfigMgrServer | GetDistributionPointGroupStatusforPackage |
| ConfigMgrServer | GetDistributionPointGroups |
| ConfigMgrServer | GetDistributionPointStatusforPackage |
| ConfigMgrServer | GetDistributionPoints |
| ConfigMgrServer | GetDistributionPointsInDistributionPointGroup |
| ConfigMgrServer | GetDriverPackages |
| ConfigMgrServer | GetDrivers |
| ConfigMgrServer | GetEndpointProtectionAntimalwarePolicies |
| ConfigMgrServer | GetEndpointProtectionFirewallPolicies |
| ConfigMgrServer | GetFailedContentOnDistributionPoint |
| ConfigMgrServer | GetGlobalConditions |
| ConfigMgrServer | GetInstalledSoftwareUpdates |
| ConfigMgrServer | GetMachinesWithCmBlmKeys |
| ConfigMgrServer | GetMalwareDetected |
| ConfigMgrServer | GetMigrationJobs |
| ConfigMgrServer | GetNonCompliantUpdateStatuses |
| ConfigMgrServer | GetObjectContainerItems |
| ConfigMgrServer | GetOperatingSystemImages |
| ConfigMgrServer | GetPackages |
| ConfigMgrServer | GetPowerConfigurationsforComputer |
| ConfigMgrServer | GetQueries |
| ConfigMgrServer | GetRequiredSoftwareUpdates |
| ConfigMgrServer | GetScopeMemberships |
| ConfigMgrServer | GetSecurityRoles |
| ConfigMgrServer | GetSecurityScopes |
| ConfigMgrServer | GetServersandSiteSystemRoles |
| ConfigMgrServer | GetServiceWindowsforComputer |
| ConfigMgrServer | GetSiteDeviceCollectionsWithFolders |
| ConfigMgrServer | GetSiteStatus |
| ConfigMgrServer | GetSites |
| ConfigMgrServer | GetSoftwareMeteringRules |
| ConfigMgrServer | GetSoftwareUpdateGroups |
| ConfigMgrServer | GetSoftwareUpdatesInGroup |
| ConfigMgrServer | GetStatusMessageQueries |
| ConfigMgrServer | GetSystemBiosInformation |
| ConfigMgrServer | GetSystemConsoleUsageData |
| ConfigMgrServer | GetSystemFirmwareStatus |
| ConfigMgrServer | GetSystemOperatingSystemInformation |
| ConfigMgrServer | GetSystemsBitLockerEncryptionStatus |
| ConfigMgrServer | GetTaskSequenceContent |
| ConfigMgrServer | GetTaskSequences |
| ConfigMgrServer | GetUnknownDevices |
| ConfigMgrServer | GetUserCollectionFolders |
| ConfigMgrServer | GetUserCollectionsinFolder |
| ConfigMgrServer | GetUserDevices |
| ConfigMgrServer | GetUserDevicesByUsername |
| ConfigMgrServer | GetUserStateMigrations |
| ConfigMgrServer | GetVirtualHardDisks |
| ConfigMgrServer | GetWarrantyInformation |
| EndpointInsights | OpenRecastEiReportViewer |
| Filesystem | GetDirectoryEntries |
| Filesystem | GetDirectoryEntries |
| Filesystem | GetSecurityByName |
| InstalledSoftware | ListSoftware |
| KioskManager | ListProfiles |
| LocalActions | ActiveDirectoryCleanupTool |
| MBAM | GetMBAMCompliance |
| MBAM | GetMBAMComplianceForAllMachines |
| MBAM | GetMachinesWithMBAMKeys |
| MBAM | GetMachinesWithMBAMKeys_v2 |
| MBAM | GetRecoveryKeysForDevice |
| MBAM | GetTPMHash |
| MBAM | GetTPMHashForUser |
| Network | PingComputer |
| Registry | GetValue |
| Registry | ListHives |
| Registry | ListSubkeys |
| Registry | ListValues |
| SCEP | GetDefenderExclusions |
| SCEP | GetDefenderStatus |
| Services | ListServices |
| SystemInformation | GetAllLocalGroupMembers |
| SystemInformation | GetBatteryInformation |
| SystemInformation | GetLoggedInUsers |
| SystemInformation | GetRunningProcesses |
| SystemInformation | GetUserSessions |
| SystemInformation | ReadOnly |
| TaskScheduler | GetTaskResults |
| TaskScheduler | GetTaskResultsForDate |
| UnifiedWriteFilter | GetFileExclusions |
| UnifiedWriteFilter | GetOverlayConfiguration |
| UnifiedWriteFilter | GetRegistryExclusions |
| UnifiedWriteFilter | GetUnifiedWriteFilterFeatureStatus |
| UnifiedWriteFilter | GetWriteFilterStatus |
| WindowsSecurity | GetAllVirtualizationBasedSecuritySettings |
| WindowsSecurity | GetCredentialGuardSettings |
| WindowsSecurity | GetSecureBootStatus |
| WindowsSecurity | GetSystemGuardSecureLaunchSettings |
| WindowsSecurity | GetTpmStatus |
| WindowsSecurity | GetUefiSecureBootStatus |
| WindowsSecurity | GetVirtualizationBasedSecuritySettings |
| WindowsSecurity | GetWindowsFirewallProfiles |
| WindowsSecurity | GetWindowsFirewallRules |
| WindowsTaskScheduler | ListTasks |
| WMI | ReadOnly |