Weekly Tip 23

Set your SCCM collections up with proper limiting collections to have a hierarchical setup. It makes permissions management much easier.

Example: company XYZ has two offices, one in New York and one in LA. Each office has its own technical support needing SCCM console rights to their respective collections, but not the other office’s. Each office has its own sales, marketing, and accounting staff. Set collections up like this:

DescriptionCollection NameLimiting Collection Name
All Company Computers(all computers from NY and LA)All-XYZ-ComputersAll Systems
All LA ComputersLA-OfficeAll-XYZ-Computers
All NY ComputersNY-OfficeAll-XYZ-Computers
All LA Sales ComputersLA-Sales-ComputersLA-Office
All LA Marketing ComputersLA-Marketing-ComputersLA-Office
All LA Accounting ComputersLA-Accounting-ComputersLA-Office
All NY Sales ComputersNY-Sales-ComputersNY-Office
All NY Marketing ComputersNY-Marketing-ComputersNY-Office
All NY Accounting ComputersNY-Accounting-ComputersNY-Office

Now, when I assign my rights, I will assign New York technical support staff to the NY-Office collection and LA technical staff to the LA-Office collection. Because of the way limiting collections work, granting them access to those two collections will also grant them access to their respective sales, marketing, and accounting collections. Furthermore, for IT staff such as the help desk that needs to see all devices, I can grant them rights to the All-XYZ-Computers collection and they will see LA-Office, NY-Office, and all sales, marketing, and accounting collections.

Share:

Facebook
Twitter
LinkedIn
Picture of Matt Tinney

Matt Tinney

Professional IT executive & business leader having decades of experience with Microsoft technologies delivering modern-day cloud & security solutions.

Contact Us

=
On Key

More Posts

WME Cybersecurity Briefings No. 028
Cyber Security

WME Security Briefing 27 September 2024

DragonRank SEO Manipulation Campaign Targeting IIS Servers Across Asia and Europe Overview A cyber espionage campaign is targeting IIS servers in several countries across Asia and Europe. The DragonRank campaign emanates from a simplified Chinese-speaking actor and specializes

Click Here to Read Full Article »
Be assured of everything

Get WME Services

Stay ahead of the competition with our Professional IT offerings.

=