How to Use

Using Device Group Permissions in Dell OpenManage Essentials
17
d. Click ‘Ok’.
2. Add the user to the OmeAdministrators user group.
a. Navigate to the Local Users and Groups on the OpenManage Essentials server (Server
Manager → Configuration → Local Users and Groups)
b. Add the promoted user to the OmeAdministrators user group, or add the promoted user
to a member user group of OmeAdministrators.
Note: After completing the above procedure, the promoted user must re-log into OpenManage
Essentials to apply the changes.
Summary
The Device Group Permissions portal gives administrators the tools to restrict and limit the scope and
impact of a user. Creating and assigning custom device groups allows administrators to tailor the
devices available to a user based on the user’s responsibilities and expertise. An administrator can limit
the target device groups of a user and mitigate the risk of a user unintentionally targeting and
executing against devices and device groups.
An OmeSiteAdministrator is a limited user. This type of user has several restrictions and limitations to
ensure the security of assigned device groups. An OmeSiteAdministrator can only target device groups
assigned to them for system update and remote tasks.
An administrator can assign device group permissions to users that have and have not previously logged
into the OpenManage Essentials console. An administrator can demote an administrator or promote an
OmeSiteAdministrator.
Using the device group permissions portal adds a layer of granularity to the security of the OpenManage
Essentials console. The device group permissions security reduces the risk of task execution side effects
and helps administrators better manage users of OpenManage Essentials.
FAQ
Device Group Permissions Portal
1. Can I add a user group to the OmeSiteAdministrators role?
a. No, in OpenManage Essentials v1.2 we do not support adding a user group to the
OmeSiteAdministrators role.
2. Can I add an administrator to the OmeSiteAdministrators role?
a. Yes, you can add an OmeAdministrator to the OmeSiteAdministrators role. However,
you MUST remove the administrator from the OmeAdministrators user group.
3. Can I add a user that has not logged into OpenManage Essentials to the OmeSiteAdministrators
role?
a. Yes, you can use the edit members wizard to add a user that has not logged into
OpenManage Essentials to the OmeSiteAdministrators role.
4. What happens if a user is a power user and a site administrator?
a. Roles and permissions are additive. The user will no longer have all of (but retain some
of) the restrictions of a site administrator. The user will be able to perform edit actions