1 of 1 people found this helpful
I found these authorizations below. Are these the only types of jobs where executiontask override nsh parameters are excepted?
Not sure if these would also relate for NSH SCRIPT JOBS
We do have a related ticket for this ISS04508827
do you see the NSHScriptJob.ExecutionTaskOverride ? there should be an ExecutionTaskOverride for every job type.
Yes Bill I do see it in our environment. I will need to apply each of the jobtype.executiontaskoverride to the appropriate LM policies. Thanks for pointing me in the correct direction.
I was looking up the information in the documentation and these authorization were not listed online
NSH Script Job management
Break NSH Script Job's dependencies
Cancel NSH Script Job
Create NSH Script Job
Create ACL for NSH Script Job
Delete NSH Script Job
Execute NSH Script Job
Modify NSH Script Job
Modify ACL for NSH Script Job
Modify parameters for NSH Script Job
Modify job priority for NSH Script Job
Modify NSH Script Job properties
Modify NSH Script Job schedule
Modify NSH Script Job targets
Pause and resume Discovery Job execution
Ok – we can get those pages updated.
Anyone ever saw this issue?
Please see attached screen. We have granted all authorizations (ExecutionTask.* and NSHScriptJob.* in the role) we could not select "End Date" in the schedule, what are the auths we are missing?
maybe you have the bits greyed out there because you have 'once' selected. do you see the same w/ the other schedule types ?
With BLAdmins role the the bits are active. The role that has issue is a non BLAdmins role but it has all ExecutionTask and NSHScriptJob authorizations.
so this 'other' role has the et and nsh job permissions set in the role and on this object ?
what role created the ET - BLAdmins ?
what if the 'other' role creates the ET ?
yes, at the role level full auths granted (all NSHScriptJob, ExecutionTask) at object level NSHScriptJob.* is granted.
BLAdmins role is able to create ET and choose the bits, but the non-BLAdmins role is not able to select the bits since they are grayed out.
If this is an ET, don’t you need to grant ET.* on the object to this other role ?