Permissions reference

Permissions define the operational actions that a role or a user can perform within the platform. The same set of permissions appears on the Permissions step of the Create Role and Edit role wizards, on the Permissions tab of the role details page, and in the Permissions section of the user details page.

Explicit and effective permissions

On the user details page, the Permissions table shows two columns:

  • Explicit permissions: Permissions that you grant directly to the user by using the toggles and lists in the first column. Click Save to apply your changes.
  • Effective permissions: The resulting permissions for the user, combining the explicit permissions with the permissions inherited from the assigned roles and the bound BigFix operator.

On the role details page, a Granted badge next to a permission indicates that the role grants that permission.

When a user has multiple roles, the effective value of each toggle permission is the most permissive value across all assigned roles, and the effective access level for each application is the highest level granted by any assigned role.

Available permissions

Table 1. Permissions
Group Permission Control and values
General Master operator Toggle (on/off)
Show Other Operators' Actions (role) Toggle (on/off). Shown on the user details page and the role details page.
Stop Other Operators' Actions Toggle (on/off). BigFix UI saves this permission to the platform role, but enforces it only in the BigFix Console. In BigFix UI, operators can stop only their own deployments. For more information, see Deployments.
Can Create Actions Toggle (on/off)
Can Lock Toggle (on/off)
Can Send Refresh To Multiple Computers (labeled Can send multiple refresh in the role wizard) Toggle (on/off)
Can Submit Queries Toggle (on/off)
Custom content Toggle (on/off)
Unmanaged Assets List. For example, Show All.
Action behavior Post Action Behavior List: Allow Restart and Shutdown, Allow Restart Only, or None.
Action Script Commands List: Allow Restart and Shutdown, Allow Restart Only, or None.
Interface access Can use Console Toggle (on/off)
Can use WebUI Toggle (on/off)
Can use REST API Toggle (on/off)
Note:
Hover over the information icon next to a permission in the UI to read its description.