7.13 Patch Management Rights - Device

Patch Management rights are configurable at two levels: zone and device. The zone-level Patch Management rights (see Section 7.14, Patch Management Rights - Zone) control the operations that are available on the Patch Management page and on device objects, while the device-level Patch Management rights control only the operations available on device objects.

7.13.1 Contexts

Specify the Device folders (contexts) that you want the administrator’s Patch Management rights to apply to. To select a folder, click Add to display the Contexts dialog box, browse for and select the folder (or multiple folders), then click OK. The rights also apply to the folder’s subfolders.

7.13.2 Privileges

The Privileges section lets you grant the administrator rights to perform Patch Management operations associated with the contexts (folders) you selected in the Contexts section.

The following rights are available:

RIGHT

OPERATIONS CONTROLLED BY THE RIGHT

NOTES

Patch Deploy

  • Deploy a patch to a device

  • Deploy a patch to a device group

An administrator must have this right and Bundle Rights for the patch bundle being deployed.

Assign a Baseline

  • Assign a patch to a device group’s mandatory baseline of patches

 

Remove from Baseline

  • Remove a patch from a device group’s mandatory baseline of patches

 

View Patch Details

  • View information for a patch that is listed in a device’s Patches list

 

Recalculate Baseline

  • Initiate an immediate check of all devices in a device group to evaluate baseline patch compliance and apply the required baseline patches if necessary

 

Export Patch

  • Export patch information to a CSV file for one or more patches selected from a device’s Patches list