Chat now with support
Chat with Support

KACE Systems Management Appliance 9.1 Common Documents - Administrator Guide

About the KACE Systems Management Appliance (SMA) Getting started
Configuring the appliance
Requirements and specifications Power-on the appliance and log in to the Administrator Console Access the Command Line Console Tracking configuration changes Configuring System-level and Admin-level General Settings Configure appliance date and time settings Enable Two-Factor Authentication for all users Verifying port settings, NTP service, and website access Configuring network and security settings Configuring Agent settings Configuring session timeout and auto-refresh settings Configuring locale settings Configuring the default theme Configure data sharing preferences About DIACAP compliance requirements Configuring Mobile Device Access Enable fast switching for organizations and linked appliances Linking Quest KACE appliances Configuring history settings
Setting up and using labels to manage groups of items Configuring user accounts, LDAP authentication, and SSO Using Replication Shares Managing credentials Configuring assets
About the Asset Management component Using the Asset Management Dashboard About managing assets Adding and customizing Asset Types and maintaining asset information Managing Software assets Managing physical and logical assets Maintaining and using manual asset information Managing locations Managing contracts Managing licenses Managing purchase records
Setting up License Compliance Managing License Compliance Setting up Service Desk Configure the Cache Lifetime for Service Desk widgets Creating and managing organizations Importing and exporting appliance resources
Managing inventory
Using the Inventory Dashboard Using Device Discovery Managing device inventory
About managing devices Features available for each device management method About inventory information Tracking changes to inventory settings Managing inventory information Finding and managing devices Provisioning the KACE SMA Agent Manually deploying the KACE SMA Agent Using Agentless management Adding devices manually in the Administrator Console or by using the API Forcing inventory updates Managing MIA devices Obtaining Dell warranty information
Managing applications on the Software page Managing Software Catalog inventory
About the Software Catalog Viewing Software Catalog information Adding applications to the Software Catalog Managing License assets for Software Catalog applications Associate Managed Installations with Cataloged Software Using software metering Using Application Control Update or reinstall the Software Catalog
Managing process, startup program, and service inventory Writing custom inventory rules
Deploying packages to managed devices
Distributing software and using Wake-on-LAN Broadcasting alerts to managed devices Running scripts on managed devices Managing Mac profiles Using Task Chains
Patching devices and maintaining security
About patch management Subscribing to and downloading patches Creating and managing patch schedules Managing patch inventory Managing Dell devices and updates Maintaining device and appliance security
Using reports and scheduling notifications Monitoring servers
Getting started with server monitoring Working with monitoring profiles Managing monitoring for devices Working with alerts
Using the Service Desk
Configuring Service Desk Using the Service Desk Dashboard Managing Service Desk tickets, processes, and reports
Overview of Service Desk ticket lifecycle Creating tickets from the Administrator Console and User Console Creating and managing tickets by email Viewing tickets and managing comments, work, and attachments Merging tickets Using the ticket escalation process Using Service Desk processes Using Ticket Rules Run Service Desk reports Archiving, restoring, and deleting tickets Managing ticket deletion
Managing Service Desk ticket queues About User Downloads and Knowledge Base articles Customizing Service Desk ticket settings Configuring SMTP email servers
Maintenance and troubleshooting
Maintaining the appliance Troubleshooting the KACE SMA
Appendixes Glossary About us Legal notices

About default roles

About default roles

Default roles are available for standard user account types such as administrator, end-user, and limited-access.

The following roles are available by default. For more information about managing Organizational roles, see Managing Organization Roles and User Roles.

Role

Description

Organization Roles

Organization Roles are supersets of permissions that are assigned to organizations, and they define the permissions that are available to organization users. For example, if an organization is assigned an Organization Role that has the Distribution tab hidden, users in that organization, including the Admin user, cannot access the Distribution tab.

Default Role

The Default Role in the Organization Roles section has Write and Read permission for all tabs. You can create additional Organization Roles, but you cannot edit or delete the Default Role.

User Roles

Roles assigned to users to control their access to the Administrator Console and User Console. If the Organization component is enabled on your appliance, the permissions available to these roles depends on the Organization Role assigned to the organization.

Administrator

The most powerful user role on the KACE SMA. By default, users with the Administrator role have permission to see or change information and settings. This includes promoting or demoting other users by changing their roles. The Administrator role cannot be altered or deleted. Assign this role only to trusted administrators.

Staff members assigned the Administrator role have permission to manage and modify Service Desk tickets from the Tickets tab in the Administrator Console, though they might not be able to own tickets themselves.

Users with the Administrator role can also use the security, scripting, and distribution features to resolve Service Desk tickets, then document the issues in the Knowledge Base.

The Administrator role primarily interacts with the KACE SMA through the Administrator Console.

No Access

Users with this role cannot log on to the Administrator Console or User Console.

Read Only Administrator

This role has the ability to view but not change any information or settings in the KACE SMA. This role is useful for oversight personnel, such as supervisors.

This role primarily interacts with the KACE SMA through the Administrator Console.

User ConsoleOnly

This role is for appliance users. By default, this role has permission to create, view, and modify Service Desk tickets.

This role interacts with the appliance exclusively through the User Console.

Create a Service Desk staff role

Create a Service Desk staff role

You can create a Service Desk staff role to establish permissions for users who work on Service Desk settings and components.

By default, users with the Administrator role have permission to change all Service Desk components, including creating and removing users. In addition, you can create a more limited Service Desk role for your organization. Users with this role have permission to work on tickets, add items that can be downloaded from the User Console, add articles to the Knowledge Base, and manage announcements that appear on the User Console home page. However, they do not manage users, run reports, or change appliance settings. This guide refers to this group as Service Desk Admin.

If the Organization component is enabled on your appliance, you can create separate Service Desk Admin roles for each organization.

1.
Go to the Role Detail page:
a.
Log in to the KACE SMA Administrator Console, http://KACE_SMA_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Settings, then click Roles.
c.
Select Choose Action > New.
2.
In the Name field, provide name, such as Service Desk Admin.
3.
In the Description field, provide a brief description of the role, such as Used for Service Desk Administrators.
4.
Click the [Expand All] link next to Administrator Console Permissions to display the permissions settings for all categories.

Category

Item

Permission level

Home

All

All Read

Inventory

Devices

WRITE

Software

WRITE

Software Catalog

WRITE

License Compliance

HIDE

Processes

HIDE

Startup Programs

HIDE

Services

HIDE

Discovery Schedules

HIDE

Discovery Results

HIDE

SNMP Inventory Configurations

HIDE

Monitoring

Devices

READ

Alerts

WRITE

Profiles

HIDE

Maintenance Windows

HIDE

Log Enablement Packages

HIDE

Assets

All

HIDE

Distribution

All

HIDE

Scripting

All

HIDE

Security

All

HIDE

Service Desk

Tickets

WRITE

User Downloads

WRITE

Knowledge Base

WRITE

Announcements

WRITE

Archive

READ

Configuration

READ

Reporting

All

All Hide

Settings

All

All Hide

User Console

All

All Read

6.
Click Save.

The Roles page shows the new role. When a user who is assigned to this role logs in, the appliance component bar shows the available features.

Assign user roles

Assign user roles

After you import or create user accounts, you can assign user roles to those accounts.

1.
Go to the Users list:
a.
Log in to the KACE SMA Administrator Console, http://KACE_SMA_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Settings, then click Users.
2.
Assign the Administrator role to your Service Desk administrators:
b.
Select Choose Action > Apply Role > Administrator.
By default, Administrator users have owner/submitter permissions.
3.
Assign the Service Desk Staff role to your team users:
b.
Select Choose Action > Apply Role > Service Desk Staff.
4.
Assign the All Ticket Owners label to your Service Desk team members:
b.
Select Choose Action > Apply Label > All Ticket Owners.
5.
Create a label named User, then apply the User label and role to users.

Apply labels and roles to Service Desk staff

Apply labels and roles to Service Desk staff

You can apply labels and roles to Service Desk staff members to manage their permissions.

For instructions on creating labels and roles, see Setting up roles for user accounts and Setting up labels for user accounts.

1.
Add a user to the DefaultTicketOwners@mydomain.com alias.
2.
Go to the User Detail page:
a.
Log in to the KACE SMA Administrator Console, http://KACE_SMA_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Settings, then click Users.
c.
Display the User Detail page by doing one of the following:
Select Choose Action > New.
3.
In the Assign To Label field, click Edit.
4.
In the label window, drag the All Ticket Owners label to the Assign To field, then click Save.
5.
In the Role field, select the Service Desk Staff role.
6.
Click Save.

The user has permission to own, modify, fix, and close tickets. The user automatically receives email when a ticket is created.

Related Documents