ITAM Privileges

This is a complete list of Privileges that can be toggled in Roles as of ITAM 8.1.0.6.

It is important to remember that in most cases you need a Group in addition to a Role because Permission is Access + Privilege.  You can often grant Editors group and use the Role as the final say on a given Permission, unless you need granular Access beyond what Sections can offer.

Account Privileges (28)

Privilege

Notes

Logon in KeyConfigure

Required to log on to the server using the KeyConfigure admin application

View Roles and Accounts

 

View Details of Roles and Accounts

 

Change Roles and Accounts

 

Change Account Passwords

 

View Own Account Details

 

Change Own Account Password

 

Change Own Account Details

 

Refresh Restricted Tokens

 

View Own Assets

Enables the option when clicking your account name in the upper right of the Web UI.

View Role Permissions

 

Change Role Permissions

 

Change Account Roles

 

Create Accounts

 

Create Admin Groups

 

Create Roles

 

Delete Accounts

 

Delete Admin Groups

 

Delete Roles

 

Assume a Section Group

 

Impersonate a different Account

 

Impersonate the Administrator Account

 

View Admin Authentication Data

 

Change Admin Authentication Data

 

View Admin Authentication Settings

 

Change Admin Authentication Settings

 

View Admin Authentication Groups

 

Change Admin Authentication Groups

 

 

Settings Privileges (92)

Privilege

Notes

View Authentication Data

 

Change Authentication Data

 

View Authentication Settings

 

Change Authentication Settings

 

Change Guest Access

 

View Top-level Access Lists

 

Change Top-level Access Lists

 

View Export Settings

 

Change Export Settings

 

Change Export Schedule

 

Perform Immediate Export

 

Change Server Name

 

View Backup Settings

 

Change Backup Settings

 

Perform Immediate Backup

 

View Referral Settings

 

Change Referral Settings

 

View Mail Status Settings

 

Change Mail Status Settings

 

View Background/Idle Settings

 

Change Background/Idle Settings

 

View Default Purchase Currency

 

Change Default Purchase Currency

 

View Division Separator

 

Change Division Separator

 

View Division Mapping Settings

 

Change Division Mapping Settings

 

Run Division Mapping on-demand

 

View System User Names

Related to specific setting in Settings - Misc in Web and Config - General - Misc in KeyConfigure

Change System User Names

Related to specific setting in Settings - Misc in Web and Config - General - Misc in KeyConfigure

View Privacy Settings

 

Change Privacy Settings

 

View Audit Throttle Settings

 

Change Audit Throttle Settings

 

View Audit Schedule Settings

 

Change Audit Schedule Settings

 

View Product Audit Settings

 

Change Product Audit Settings

 

View KeyAccess Versions Settings

 

Change KeyAccess Versions Settings

 

View Computer ID Settings

 

Change Computer ID Settings

 

View Diagnostic Log Settings

 

Change Diagnostic Log Settings

 

View Product Repository Settings

 

Change Product Repository Settings

 

View Proxy Settings

 

Change Proxy Settings

 

Import Product Repository Updates

 

Import Product Repository Auto-Updates

 

Change Primary Map

Related to Settings - Maps in the Web UI

Change Tile Layer URL

Related to Settings - Maps in the Web UI

Change Google Maps API Key

Related to Settings - Maps in the Web UI

View TeamDynamix Instance URL

Related to Settings - TeamDynamic in the Web UI

Change TeamDynamix Instance URL

Related to Settings - TeamDynamic in the Web UI

View TeamDynamix Account Name

Related to Settings - TeamDynamic in the Web UI

Change TeamDynamix Account Name

Related to Settings - TeamDynamic in the Web UI

View TeamDynamix Account Password

Related to Settings - TeamDynamic in the Web UI

Change TeamDynamix Account Password

Related to Settings - TeamDynamic in the Web UI

View Printer Update Frequency

 

Change Printer Update Frequency

 

View Printer Service URL

 

Change Printer Service URL

 

View Printer URL Pattern

 

Change Printer URL Pattern

 

View Printer Authorization Key

 

Change Printer Authorization Key

 

View Printer Admin Name

 

Change Printer Admin Name

 

View Printer Admin Password

 

Change Printer Admin Password

 

View Client, Import Configurations

 

Add/Modify Client, Import Configurations

 

Delete Client, Import Configurations

 

View Private Script, Auth Configurations

 

Add/Modify Private Script, Auth Configurations

 

Delete Private Script, Auth Configurations

 

View Script Configurations

Relates to working with Scripts in KeyConfigure

Add/Modify Script Configurations

Relates to working with Scripts in KeyConfigure

Delete Script Configurations

Relates to working with Scripts in KeyConfigure

View Action Configurations

Relates to the Actions page in the Web

Add/Modify Action Configurations

Relates to the Actions page in the Web

Delete Action Configurations

Relates to the Actions page in the Web

View Inventory Configurations

Required to use the mobile app to see record.

Add/Modify Inventory Configurations

Required to use the mobile app to update records.

Delete Inventory Configurations

Required to delete presets in the mobile app.

View Vendor License Files

Allows seeing licenses on the Settings - Advanced page in the Web UI.

Add/Modify Vendor License Files

Allows adding licenses on the Settings - Advanced page in the Web UI.

Delete Vendor License Files

Allows removing licenses on the Settings - Advanced page in the Web UI.

View Custom Field Values

View right to Settings - Columns in the web UI

Add/Modify Custom Field Values

Modify right to the value settings only in Settings - Columns in the web UI

Add/Modify Custom Field Settings

Modify right to overall settings in Settings - Columns in the web UI

 

Policy Privileges (16)

Privilege

Notes

View Policies

 

View Details of Policies

 

Change Details of Policies

 

Change Limits of Policies

 

Add Policies

 

Add Policies for Any Section

 

Delete Policies

 

View Policy History

 

View Policy Schedules

 

Change Policy Schedules

 

Delete Policy Schedules

 

Set which Columns require Inspect Access

 

View Own Access

 

View Access Lists

 

Change Access Lists

 

Auto-config Policies for new Family products

 

 

Purchase Privileges (18)

Privilege

Notes

View Purchases

 

View Details of Purchases

 

Change Details of Purchases

 

Add Purchases

 

Add Purchases for Any Section

 

Delete Purchases

 

View Custom Columns

 

Change Custom Column Labels

 

Set which Columns require Inspect Access

 

View Contract List

 

Change Contract List

 

View Purchase Document Lists

 

View Purchase Documents

 

Add Purchase Documents

 

Delete Purchase Documents

 

View Own Access

 

View Access Lists

 

Change Access Lists

 

 

Product Privileges (9)

Privilege

Notes

View Products

 

View Details of Products

 

Change Details of Products

 

Add Products

 

Delete Products

 

View Product Packages

 

View Details of Product Packages

 

Change Details of Product Packages

 

Add Product Packages

 

 

Program Privileges (4)

Privilege

Notes

View Programs

 

View Details of Programs

 

Change Details of Programs

 

Delete Programs

 

 

Computer Privileges (18)

Privilege

Notes

View Computers

 

View Details of Computers

 

Change Details of Computers

 

Add Computers

 

Delete Computers

 

View Computer History

 

Connect Remotely (via KeyReporter)

 

View Custom Columns

 

Change Custom Column Labels

 

Set which Columns require Inspect Access

 

Change Computer Rules

 

View Computer Document Lists

 

View Computer Documents

 

Add Computer Documents

 

Delete Computer Documents

 

View Own Access

 

View Access Lists

 

Change Access Lists

 

 

Device Privileges (16)

Privilege

Notes

View Devices

 

View Details of Devices

 

Change Details of Devices

 

Add Devices

 

Delete Devices

 

View Device History

 

View Custom Columns

 

Change Custom Column Labels

 

Set which Columns require Inspect Access

 

View Device Document Lists

 

View Device Documents

 

Add Device Documents

 

Delete Device Documents

 

View Own Access

 

View Access Lists

 

Change Access Lists

 

 

Model Privileges (9)

Privilege

Notes

View Models

 

View Details of Models

 

Change Details of Models

 

Add Models

 

Delete Models

 

View Model Document Lists

 

View Model Documents

 

Add Model Documents

 

Delete Model Documents

 

 

User Privileges (13)

Privilege

Notes

View Users

 

View Details of Users

 

Change Details of Users

 

Add Users

 

Delete Users

 

Set which Columns require Inspect Access

 

View User Document Lists

 

View User Documents

 

Add User Documents

 

Delete User Documents

 

View Own Access

 

View Access Lists

 

Change Access Lists

 

 

Active Client Privileges (8)

Privilege

Notes

View Active Clients

 

View Details of Active Clients

 

Send Bulletin Messages

 

Reclaim Licenses

 

Return Portable License Early

 

Send Bulletins Immediately

 

Request Immediate Software Audit

 

Force Immediate Disconnect

 

 

Location Privileges (4)

Privilege

Notes

View Locations

Related to the Locations Window in KeyConfigure.

View Details of Locations

Related to the Locations Window in KeyConfigure.

Change Details of Locations

Related to the Locations Window in KeyConfigure.

Delete Locations

Related to the Locations Window in KeyConfigure.

 

Time Set Privileges (5)

Privilege

Notes

View Time Sets

 

View Details of Time Sets

 

Change Details of Time Sets

 

Add Time Sets

 

Delete Time Sets

 

 

Software Audit Privileges (6)

Privilege

Notes

View Software Audit

 

View Details of Software Audit

 

View Product Audit

 

View Details of Product Audit

 

View Package Audit

 

View Details of Package Audit

 

 

Shadow Privileges (5)

Privilege

Notes

View Shadows

Shadows are deprecated and should not be used.

Change Shadow Hints

Shadows are deprecated and should not be used.

Create Shadow License

Shadows are deprecated and should not be used.

Change Shadow Password

Shadows are deprecated and should not be used.

Send Shadow Commands

Shadows are deprecated and should not be used.

 

Group Privileges (4)

Privilege

Notes

View Groups

 

View Details of Groups

 

Create and Change Details of Groups

 

Delete Groups

 

 

Journal Privileges (5)

Privilege

Notes

View Journal Settings

 

Change Journal Settings

 

View Journal

 

View Details of Journal Entries

 

Resolve and Acknowledge Journal Entries

 

 

Log File Privileges (4)

Privilege

Notes

Change Legacy Log File Name

 

Change Legacy Log Content Settings

 

Change Auto-swap Settings

 

Delete Legacy Log Files

 

 

Report Privileges (13)

Privilege

Notes

Run Reports

 

Run Usage-based Reports

 

View Reports on KeyReporter

 

Save Reports on KeyReporter

 

Delete Reports on KeyReporter

 

View Report Folders

 

Inspect Reports within Folders

 

Change Report Folders

 

Create Report Folders

 

Delete Report Folders

 

View Own Access

 

View Access Lists

 

Change Access Lists

 

 

KeyReporter Privileges (53)

Privilege

Notes

Access Reports

 

Build Reports

 

View Completed Reports

 

Change Completed Reports

 

Delete Completed Reports

 

Save Completed Reports

 

Download Completed Reports

 

View Scheduled Reports

 

Change Scheduled Reports

 

Create Scheduled Reports

 

Delete Scheduled Reports

 

View Dashboard

 

Change Own Dashboard

 

View Other Dashboards

 

Change Other Dashboards

 

Delete Dashboards

 

View Maps

See the Maps page in the web UI

View Unpublished Maps

Allow seeing maps that have not yet been published (draft mode).  Currently up to 8.1.0.6 this is what also controls visibility of the Help page in the UI.

View Heatmaps on Maps pages

 

Change Availability Maps

Modify Maps in the Web UI

Delete Availability Maps

Delete Map sets and Floorplans in the Web UI

Search for objects in KeyReporter

Allow use of the Search bar in the Web UI.  Recommended for most non-guest accounts.

View object details in KeyReporter

Permits opening detail sliders for things like Computers and Purchases.

Inspect objects via REST API

Required for most things to be visible in the Web UI.

Modify objects via REST API

Required for most things to be editable in the Web UI.

Create Access Tokens with Long Expirations

Used only when able to make access tokens under Edit Account in the upper right user menu.

View Computer List Page in KeyReporter

 

View Device List Page in KeyReporter

 

View Software List Page in KeyReporter

 

View User List Page in KeyReporter

 

View Purchase List Page in KeyReporter

 

View Policy List Page in KeyReporter

 

View Models List Page in KeyReporter

 

View App Extras

Allow seeing any activated Extra (ACLs apply)

Configure App Extras

Allow modifying settings on an Extra (ACLs apply)

Add App Extras

Allow activating Extras in Settings - Extras

Delete App Extras

Allow deactivating Extras in Settings - Extras

Use Forms

Allow use of Forms from the records menus in the Web

View Forms

Allow seeing the Settings - Forms page in the Web

Change Forms

Allow modifying existing forms on the Forms page

Add Forms

Allow creation of new Forms in the Web UI

Delete Forms

Allow deleting existing Forms in the Web UI

Use Scripts

Allow running scripts from menu contexts in the Web

View List of Scripts

Allow view of the Scripts page in the Web

Change Scripts

Allow modifying script configurations in the Web

Add Scripts

Allow activating new scripts in the Web

Delete Scripts

Allow deactivating scripts in the Web

Send e-mail via KeyReporter

 

View Settings in KeyReporter

 

Change Settings in KeyReporter

 

View Network Settings

 

Change Network Settings

 

Start and Stop KeyReporter Process

Access to this button in KeyConfigure - Config - Web Service Settings.