ACL policy for role which manages Patching in Windows

Version 1
    Share:|

    Every organization has a team of people who manages OS patching in their environment. That particular group of people will have a specific role in Bladelogic such as System Administrators.

     

    The below mentioned autorizations should be a part of Patching ACL policy , which can be applied to any patching job with proper security.

     

    Authorization profiles for Windows Patching
    BatchJob.Break
    BatchJob.Cancel
    BatchJob.Create
    BatchJob.Execute
    BatchJob.Modify
    BatchJob.ModifyPriority
    BatchJob.ModifyProperties
    BatchJob.ModifySchedule
    BatchJob.ModifyTargets
    BatchJob.PauseResumeExecution
    BatchJob.Read
    BLPackage.Create
    BLPackage.Modify
    BLPackage.ModifyProperties
    BLPackage.Read
    CustomIcon.Create
    CustomIcon.Modify
    CustomSoftware.Create
    CustomSoftware.Modify
    CustomSoftware.ModifyProperties
    CustomSoftware.Read
    DeployJob.Break
    DeployJob.Cancel
    DeployJob.Create
    DeployJob.Execute
    DeployJob.Modify
    DeployJob.ModifyPriority
    DeployJob.ModifyProperties
    DeployJob.ModifySchedule
    DeployJob.ModifyTargets
    DeployJob.PauseResumeExecution
    DeployJob.Read
    DeployJob.Undo
    DepotFile.Create
    DepotFile.Modify
    DepotFile.ModifyProperties
    DepotFile.Read
    DepotFolder.Create
    DepotFolder.Modify
    DepotFolder.ModifyProperties
    DepotFolder.Read
    DepotFolder.Write
    DepotGroup.Create
    DepotGroup.Modify
    DepotGroup.ModifyProperties
    DepotGroup.Read
    DepotGroup.Write
    JobFolder.Create
    JobFolder.Modify
    JobFolder.ModifyProperties
    JobFolder.Read
    JobFolder.Write
    JobGroup.Create
    JobGroup.Modify
    JobGroup.Read
    JobGroup.Write
    PatchCatalog.Cancel
    PatchCatalog.Create
    PatchCatalog.Modify
    PatchCatalog.ModifyPriority
    PatchCatalog.ModifyProperties
    PatchCatalog.ModifySchedule
    PatchCatalog.PauseResumeExecution
    PatchCatalog.Read
    PatchCatalog.Update
    PatchCatalog.Write
    PatchDownloadJob.Break
    PatchDownloadJob.Cancel
    PatchDownloadJob.Create
    PatchDownloadJob.Execute
    PatchDownloadJob.Modify
    PatchDownloadJob.ModifyPriority
    PatchDownloadJob.ModifyProperties
    PatchDownloadJob.ModifySchedule
    PatchDownloadJob.ModifyTargets
    PatchDownloadJob.PauseResumeExecution
    PatchDownloadJob.Read
    PatchingJob.Break
    PatchingJob.Cancel
    PatchingJob.Create
    PatchingJob.Execute
    PatchingJob.Modify
    PatchingJob.ModifyPriority
    PatchingJob.ModifyProperties
    PatchingJob.ModifySchedule
    PatchingJob.ModifyTargets
    PatchingJob.PauseResumeExecution
    PatchingJob.Read
    PatchRemediationJob.Break
    PatchRemediationJob.Cancel
    PatchRemediationJob.Create
    PatchRemediationJob.Execute
    PatchRemediationJob.Modify
    PatchRemediationJob.ModifyPriority
    PatchRemediationJob.ModifyProperties
    PatchRemediationJob.ModifySchedule
    PatchRemediationJob.ModifyTargets
    PatchRemediationJob.PauseResumeExecution
    PatchRemediationJob.Read
    PatchSmartGroup.Create
    PatchSmartGroup.Modify
    PatchSmartGroup.ModifyProperties
    PatchSmartGroup.Read
    PatchSmartGroup.Write
    Server.Audit
    Server.Deploy
    Server.Discover
    Server.Modify
    Server.Read
    ServerGroup.Create
    ServerGroup.Modify
    ServerGroup.ModifyProperties
    ServerGroup.Read
    ServerGroup.Write
    WindowsSoftware.Create
    WindowsSoftware.Modify
    WindowsSoftware.ModifyProperties
    WindowsSoftware.Read