The official blog of the Microsoft System Center Configuration Manager Product Group
[Today’s post is provided by Lilian Xuan]
Every person who uses the Configuration Manager 2007 console has to work with a complicated tree that has more than fifty nodes and hundreds of actions, even if they have permission to operate on just one node. Instead of this experience, how cool would it be to have your own console based on your assigned role? Configuration Manager 2012 provides this capability with role-based administration and what we call “Show Me” in the Configuration Manager console.
What is “Show Me”?
“Show Me” is the Configuration Manager behavior that shows the administrative user only what is relevant to them. Instead of seeing all workspaces, nodes, and objects when you run the Configuration Manager console, you see only those that you need to see, based on your job role. Role-based administration in Configuration Manager hides any workspaces, nodes, and objects that you do not need to see.
Why “Show Me”?
Imagine that you have one key chain with 10 keys attached to it. One of them is to the door of your office and you don’t use the other nine keys. What would you do? Bring the whole key chain and find your office key from 10 keys, every day? I would pick out the key to my office and bring it with me, leaving the other nine at home (or throw them away).
“Show Me” in the Configuration Manager console lets you leave those keys at home that you don’t use, and bring only the one key that you need. As an example, let’s assume that you have been assigned the role-based administration security role of Asset Manager, because your job role is to collect and report on software licenses by using the Asset Intelligence feature. When you run the Configuration Manager console, would you prefer to see everything, or only objects that are relevant to this role?
Without the “Show Me” behavior, you see all the workspaces and nodes, as shown in the following picture:
Note: This is prerelease UI and is subject to change
With “Show Me”, only the relevant workspaces and nodes are shown, as in the next picture, where you can no longer see the Software Library workspace or the Configuration Items node.
Benefits of “Show Me”:
How “Show Me” works
“Show Me” behavior is the result of configuring role-based administration in Configuration Manager 2012. First, your Windows user account is granted access to the Configuration Manager console as an administrative user. Then, when your account opens the Configuration Manager console, only the nodes and objects that you have permission to manage are displayed. Objects you do not have permission to view or manage are hidden. This is controlled by the association of security roles, security scopes, and collections to your administrative user configuration:
Shown, Hidden, or Disabled
With the “Show Me” experience, administrative users might see different behaviors for objects in the Configuration Manager console. These behaviors include objects that are shown and accessible, shown but disabled, or hidden from view:
1) First, you might have permissions to an object and specific actions, but the action is displayed as disabled. The action is shown as disabled because the action is not currently available, but might become available if prerequisites are met or changed.
For example, in the following picture, the action Enable or Disable Asset Intelligence Synchronization Point is disabled because the Asset Intelligence synchronization point is not installed. However, when the Asset Intelligence synchronization point is installed, the administrative user’s assigned security roles grants them permissions to enable or disable this site system role.
2) Second, you might have permissions for some objects, but not the selected object. This can occur when you are associated with multiple security roles, and your role-based administration configuration associates your associated security roles with specific security scopes or collections.
When you use the “Show Me” behavior, watch out for these commonly reported issues:
You can also use the following two logs files to troubleshoot Configuration Manager console problems:
For information about configuring role-based administration, see Configure Role-Based Administration in Configuration Manager 2012 in the Configuration Manager 2012 TechNet library
This posting is provided "AS IS" with no warranties and confers no rights.