Permissions reference
Permissions define the operational actions that a role or a user can perform within the platform. The same set of permissions appears on the Permissions step of the Create Role and Edit role wizards, on the Permissions tab of the role details page, and in the Permissions section of the user details page.
Explicit and effective permissions
On the user details page, the Permissions table shows two columns:
- Explicit permissions: Permissions that you grant directly to the user by using the toggles and lists in the first column. Click Save to apply your changes.
- Effective permissions: The resulting permissions for the user, combining the explicit permissions with the permissions inherited from the assigned roles and the bound BigFix operator.
On the role details page, a Granted badge next to a permission indicates that the role grants that permission.
When a user has multiple roles, the effective value of each toggle permission is the most permissive value across all assigned roles, and the effective access level for each application is the highest level granted by any assigned role.
Available permissions
| Group | Permission | Control and values |
|---|---|---|
| General | Master operator | Toggle (on/off) |
| Show Other Operators' Actions (role) | Toggle (on/off). Shown on the user details page and the role details page. | |
| Stop Other Operators' Actions | Toggle (on/off). BigFix UI saves this permission to the platform role, but enforces it only in the BigFix Console. In BigFix UI, operators can stop only their own deployments. For more information, see Deployments. | |
| Can Create Actions | Toggle (on/off) | |
| Can Lock | Toggle (on/off) | |
| Can Send Refresh To Multiple Computers (labeled Can send multiple refresh in the role wizard) | Toggle (on/off) | |
| Can Submit Queries | Toggle (on/off) | |
| Custom content | Toggle (on/off) | |
| Unmanaged Assets | List. For example, Show All. | |
| Action behavior | Post Action Behavior | List: Allow Restart and Shutdown, Allow Restart Only, or None. |
| Action Script Commands | List: Allow Restart and Shutdown, Allow Restart Only, or None. | |
| Interface access | Can use Console | Toggle (on/off) |
| Can use WebUI | Toggle (on/off) | |
| Can use REST API | Toggle (on/off) |