Read-only access lets users view Right Click Tools actions, console dashboards, web dashboards and trends, and the audit log, without the ability to make changes to any devices. Users given this role will not see permissions, routes, or scopes in the Recast Management Server interface. For the full permission list, see below.
You can add a permissions template to Recast Management Server by running a simple SQL query against your RecastManagementServerDB.
For v5 Releases: Create Read-Only Role - v5
For v4 Releases: Create Read-Only Role - v4
Video Walkthrough
Read-Only Role Permission list
| Active Directory | GetADComputer |
| Active Directory | GetADComputerWithLAPSData |
| Active Directory | GetADComputers |
| Active Directory | GetADComputersBitLockerStatus |
| Active Directory | GetADComputersInGroup |
| Active Directory | GetADContainers |
| Active Directory | GetADGroup |
| Active Directory | GetADGroups |
| Active Directory | GetADGroupsInGroup |
| Active Directory | GetADOUs |
| Active Directory | GetADUser |
| Active Directory | GetADUsers |
| Active Directory | GetADUsersInGroup |
| Active Directory | GetAccountGroupMembership |
| Active Directory | GetBitLockerRecoveryData |
| Active Directory | GetGroupMembers |
| Active Directory | GetPrimaryGroupForAccount |
| Active Directory | IsAccountEnabled |
| Active Directory | SearchADComputers |
| Active Directory | SearchADGroups |
| Active Directory | SearchADUsers |
| Administration | GetAllSettings |
| Administration | GetActionExecutionGroup |
| Administration | GetActiveDirectoryServiceConnection |
| Administration | GetExecutionHistory |
| Administration | GetExecutionHistoryForJobID |
| Administration | GetMemcmServiceConnection |
| BitLocker | GetBitLockerStatus |
| BitLocker | GetRecoveryPasswordFromDevice |
| ConfigMgr Client | GetConfigurationBaselines |
| ConfigMgr Client | GetDeployedPrograms |
| ConfigMgr Client | GetDeployedTaskSequences |
| ConfigMgr Client | GetDeviceId |
| ConfigMgr Client | GetServiceWindows |
| ConfigMgr Client | GetUserPolicyEndpoint |
| ConfigMgr Client | MissingSoftwareUpdates |
| ConfigMgr Client | PackageInformation |
| ConfigMgrServer | GetAccounts |
| ConfigMgrServer | GetActiveAlerts |
| ConfigMgrServer | GetActiveDirectoryForests |
| ConfigMgrServer | GetAdministrativeUsers |
| ConfigMgrServer | GetAlertSubscriptions |
| ConfigMgrServer | GetAllAlerts |
| ConfigMgrServer | GetAllCollections |
| ConfigMgrServer | GetAllContentStatus |
| ConfigMgrServer | GetAllDeploymentTypes |
| ConfigMgrServer | GetAllDeviceCollections |
| ConfigMgrServer | GetAllDevices |
| ConfigMgrServer | GetAllDevicesInOu |
| ConfigMgrServer | GetAllDistributedContent |
| ConfigMgrServer | GetAllSoftwareUpdates |
| ConfigMgrServer | GetAllUserCollections |
| ConfigMgrServer | GetAllUsers |
| ConfigMgrServer | GetApplicationByModelId |
| ConfigMgrServer | GetApplicationRevisions |
| ConfigMgrServer | GetApplications |
| ConfigMgrServer | GetApplicationsDeployedToUsers |
| ConfigMgrServer | GetApprovalRequests |
| ConfigMgrServer | GetAssetIntelligenceCatalog |
| ConfigMgrServer | GetAssetIntelligenceHardwareRequirements |
| ConfigMgrServer | GetAssetIntelligenceInventoriedSoftware |
| ConfigMgrServer | GetAutomaticDeploymentRules |
| ConfigMgrServer | GetBaseboardInformation |
| ConfigMgrServer | GetBootImages |
| ConfigMgrServer | GetBoundaries |
| ConfigMgrServer | GetBoundaryGroups |
| ConfigMgrServer | GetCategoryInstanceById |
| ConfigMgrServer | GetCertificates |
| ConfigMgrServer | GetChassisInformation |
| ConfigMgrServer | GetClientOperations |
| ConfigMgrServer | GetClientSettings |
| ConfigMgrServer | GetCollectionFolderInformation |
| ConfigMgrServer | GetCollectionVariablesforDevice |
| ConfigMgrServer | GetCollectionsforDevice |
| ConfigMgrServer | GetCollectionsforUser |
| ConfigMgrServer | GetCompliantUpdateStatuses |
| ConfigMgrServer | GetComponentStatus |
| ConfigMgrServer | GetComputerSystemInformation |
| ConfigMgrServer | GetComputerSystemProductInformation |
| ConfigMgrServer | GetComputerWarranty |
| ConfigMgrServer | GetComputersWithX64LapsClient |
| ConfigMgrServer | GetComputersWithX86LapsClient |
| ConfigMgrServer | GetComputersWithoutLapsClient |
| ConfigMgrServer | GetConfigurationBaselines |
| ConfigMgrServer | GetConfigurationItems |
| ConfigMgrServer | GetConflictingRecords |
| ConfigMgrServer | GetContentStatus |
| ConfigMgrServer | GetDPGroupTaskSequenceContent |
| ConfigMgrServer | GetDPGroupsWithMembers |
| ConfigMgrServer | GetDeployedApplicationsForUser |
| ConfigMgrServer | GetDeploymentPackages |
| ConfigMgrServer | GetDeploymentTypesForApplication |
| ConfigMgrServer | GetDeployments |
| ConfigMgrServer | GetDeviceCollectionFolders |
| ConfigMgrServer | GetDeviceCollectionInformationforDevice |
| ConfigMgrServer | GetDeviceCollectionMembers |
| ConfigMgrServer | GetDeviceCollectionsinFolder |
| ConfigMgrServer | GetDeviceCountForLicensing |
| ConfigMgrServer | GetDevicesByCreationDate |
| ConfigMgrServer | GetDevicesByMACAddress |
| ConfigMgrServer | GetDevicesBySmBiosGuid |
| ConfigMgrServer | GetDevicesInCollectionScope |
| ConfigMgrServer | GetDevicesInSiteScope |
| ConfigMgrServer | GetDiscoveryMethods |
| ConfigMgrServer | GetDistributedSoftwareUpdates |
| ConfigMgrServer | GetDistributionPointConfigurationStatus |
| ConfigMgrServer | GetDistributionPointContent |
| ConfigMgrServer | GetDistributionPointGroupStatus |
| ConfigMgrServer | GetDistributionPointGroupStatusforPackage |
| ConfigMgrServer | GetDistributionPointGroups |
| ConfigMgrServer | GetDistributionPointStatusforPackage |
| ConfigMgrServer | GetDistributionPoints |
| ConfigMgrServer | GetDistributionPointsInDistributionPointGroup |
| ConfigMgrServer | GetDriverPackages |
| ConfigMgrServer | GetDrivers |
| ConfigMgrServer | GetEndpointProtectionAntimalwarePolicies |
| ConfigMgrServer | GetEndpointProtectionFirewallPolicies |
| ConfigMgrServer | GetFailedContentOnDistributionPoint |
| ConfigMgrServer | GetGlobalConditions |
| ConfigMgrServer | GetInstalledSoftwareUpdates |
| ConfigMgrServer | GetMachinesWithCmBlmKeys |
| ConfigMgrServer | GetMalwareDetected |
| ConfigMgrServer | GetMigrationJobs |
| ConfigMgrServer | GetNonCompliantUpdateStatuses |
| ConfigMgrServer | GetObjectContainerItems |
| ConfigMgrServer | GetOperatingSystemImages |
| ConfigMgrServer | GetPackages |
| ConfigMgrServer | GetPowerConfigurationsforComputer |
| ConfigMgrServer | GetQueries |
| ConfigMgrServer | GetRequiredSoftwareUpdates |
| ConfigMgrServer | GetScopeMemberships |
| ConfigMgrServer | GetSecurityRoles |
| ConfigMgrServer | GetSecurityScopes |
| ConfigMgrServer | GetServersandSiteSystemRoles |
| ConfigMgrServer | GetServiceWindowsforComputer |
| ConfigMgrServer | GetSiteDeviceCollectionsWithFolders |
| ConfigMgrServer | GetSiteStatus |
| ConfigMgrServer | GetSites |
| ConfigMgrServer | GetSoftwareMeteringRules |
| ConfigMgrServer | GetSoftwareUpdateGroups |
| ConfigMgrServer | GetSoftwareUpdatesInGroup |
| ConfigMgrServer | GetStatusMessageQueries |
| ConfigMgrServer | GetSystemBiosInformation |
| ConfigMgrServer | GetSystemConsoleUsageData |
| ConfigMgrServer | GetSystemFirmwareStatus |
| ConfigMgrServer | GetSystemOperatingSystemInformation |
| ConfigMgrServer | GetSystemsBitLockerEncryptionStatus |
| ConfigMgrServer | GetTaskSequenceContent |
| ConfigMgrServer | GetTaskSequences |
| ConfigMgrServer | GetUnknownDevices |
| ConfigMgrServer | GetUserCollectionFolders |
| ConfigMgrServer | GetUserCollectionsinFolder |
| ConfigMgrServer | GetUserDevices |
| ConfigMgrServer | GetUserDevicesByUsername |
| ConfigMgrServer | GetUserStateMigrations |
| ConfigMgrServer | GetVirtualHardDisks |
| ConfigMgrServer | GetWarrantyInformation |
| EndpointInsights | OpenRecastEiReportViewer |
| Filesystem | GetDirectoryEntries |
| Filesystem | GetDirectoryEntries |
| Filesystem | GetSecurityByName |
| InstalledSoftware | ListSoftware |
| KioskManager | ListProfiles |
| LocalActions | ActiveDirectoryCleanupTool |
| MBAM | GetMBAMCompliance |
| MBAM | GetMBAMComplianceForAllMachines |
| MBAM | GetMachinesWithMBAMKeys |
| MBAM | GetMachinesWithMBAMKeys_v2 |
| MBAM | GetRecoveryKeysForDevice |
| MBAM | GetTPMHash |
| MBAM | GetTPMHashForUser |
| Network | PingComputer |
| Registry | GetValue |
| Registry | ListHives |
| Registry | ListSubkeys |
| Registry | ListValues |
| SCEP | GetDefenderExclusions |
| SCEP | GetDefenderStatus |
| Services | ListServices |
| SystemInformation | GetAllLocalGroupMembers |
| SystemInformation | GetBatteryInformation |
| SystemInformation | GetLoggedInUsers |
| SystemInformation | GetRunningProcesses |
| SystemInformation | GetUserSessions |
| SystemInformation | ReadOnly |
| TaskScheduler | GetTaskResults |
| TaskScheduler | GetTaskResultsForDate |
| UnifiedWriteFilter | GetFileExclusions |
| UnifiedWriteFilter | GetOverlayConfiguration |
| UnifiedWriteFilter | GetRegistryExclusions |
| UnifiedWriteFilter | GetUnifiedWriteFilterFeatureStatus |
| UnifiedWriteFilter | GetWriteFilterStatus |
| WindowsSecurity | GetAllVirtualizationBasedSecuritySettings |
| WindowsSecurity | GetCredentialGuardSettings |
| WindowsSecurity | GetSecureBootStatus |
| WindowsSecurity | GetSystemGuardSecureLaunchSettings |
| WindowsSecurity | GetTpmStatus |
| WindowsSecurity | GetUefiSecureBootStatus |
| WindowsSecurity | GetVirtualizationBasedSecuritySettings |
| WindowsSecurity | GetWindowsFirewallProfiles |
| WindowsSecurity | GetWindowsFirewallRules |
| WindowsTaskScheduler | ListTasks |
| WMI | ReadOnly |