Understanding Role-Based Administration (RBA) in Microsoft SCCM

In this video guide, we will review how to set up role-based administration System Center Configuration Manager. This guide will cover all the essential components required for RBA including security roles, security scopes, and collections. We will cover how to use RBA to split workstation and server admins as well as two different departments. We will also review using default security roles and custom security roles and using custom scopes.

Introduction – (0:00)
Introduction to security roles, security scopes, and collections for use in RBA – (0:37)
Review AD security groups for splitting workstation and server admins and two difference departments – (4:13)
Splitting up server and workstation admins with full administrator security role – (5:33)
Split up “College of Finance” and “College of Healthcare” using collections and then create custom security scopes and security roles for this scenario – (10:17)
Creating global security scope to allow different admins to see common enterprise applications and deploy those applications – (20:11)
Review non-scopable objects and how that looks access departments – (23:55)
Copy built-in security role and create a custom security role from it – (26:46)
Using RBAViewer to create a custom security role and analyze different permissions on the fly – (28:05)
Review permissions needed to perform client push – (30:11)
Review custom permissions around applications – (32:32)

#SCCM #ConfigMgr

Justin, every one of your tutorials are really helpful and to the point. thank you!

[mehdik]

Great Tutorial, very interesting, easy to understand, that makes easy my life with sccm scopes and security. Big thanks to you.

[darvinist]

Awesome series, thank you very much for them! Could you make one about client OS servicing in SCCM?

[michaelflowers]

This is great video. I was wondering if there is a way to what objects are in a scope.

[Shloeb]

Awesome Content Justin. I always learn something new from your videos. :) Do you have CMPivot on your list?

[mrgarak]

Thanks for the great video. Did u try to start RBA viewer on Microsoft Endpoint Configuration Manager? I can't possibly make it. Any help pls.

[imranawan]

Great video. Would you be kind enough and create a video on MBAM Bitlocker... Or just Bitlocker OSD please... Not that much material on you tube

[ivssybaby]

great video, really interesting and understandable, thank you!