Permissions and access, System Manager devices

[Eagle5]

Hello,  

I am trying to setup a couple of my techs with Read Only to a Network while also having permission to manage devices in System Manager.  I've tried creating a role (tags included) and assigning it to them but they lose their current access and cannot manage any of the tablets in system manager.  Is there a setting, check box, option, that I'm missing OR is this too granular of a permission type?  The techs are allowed to see what's going on in the network, but I want them to be able to manage apps on tablets in system manager.  Any ideas of how make this work?  Thank you for your suggestions

[PhilipDAth]

The easiest way to handle this is to put Systems Manager into its own seperate network.

[BlakeRichardson · Accepted solution]

Users roles are not very granular, if an admin only has read only network access then they cannot make changes on SM. As suggested the best option is to have SM in it's own network. 

[Eagle5]

Thank you for the suggestions.  I will take check that out.  

[DarrinUllrich]

Thanks for great suggestion

[PaulF]

You may have more flexibility using Limited Access Roles: https://www.youtube.com/watch?v=HIJrktiaQ_o

The uses tags so that Admin A, with Tag Apps can only manage apps and devices with the tag Apps

Once you get your head around it, it's quite powerful