Understanding Role-Based Administration (RBA) in Microsoft SCCM

You can follow me on Twitter / setupconfigmgr for #ConfigMgr tips and tricks!
In this video guide, we will review how to set up role-based administration System Center Configuration Manager. This guide will cover all the essential components required for RBA including security roles, security scopes, and collections. We will cover how to use RBA to split workstation and server admins as well as two different departments. We will also review using default security roles and custom security roles and using custom scopes.
Please see the accompanying blog post for more resources and link setupconfigmgr.com/understand...
Introduction - (0:00)
Introduction to security roles, security scopes, and collections for use in RBA - (0:37)
Review AD security groups for splitting workstation and server admins and two difference departments - (4:13)
Splitting up server and workstation admins with full administrator security role - (5:33)
Split up “College of Finance” and “College of Healthcare” using collections and then create custom security scopes and security roles for this scenario - (10:17)
Creating global security scope to allow different admins to see common enterprise applications and deploy those applications - (20:11)
Review non-scopable objects and how that looks access departments - (23:55)
Copy built-in security role and create a custom security role from it - (26:46)
Using RBAViewer to create a custom security role and analyze different permissions on the fly - (28:05)
Review permissions needed to perform client push - (30:11)
Review custom permissions around applications - (32:32)
#SCCM #ConfigMgr

[@550891]

Justin, every one of your tutorials are really helpful and to the point. thank you!

[@PatchMyPC]

Thanks!

[@mehdi2k5]

Great Tutorial, very interesting, easy to understand, that makes easy my life with sccm scopes and security. Big thanks to you.

[@PatchMyPC]

Glad it was helpful!

[@AnilSNE]

Very good explanation. Thanks a lot.

[@PatchMyPC]

Thanks for watching

[@ivssybaby1991]

great video, really interesting and understandable, thank you!

[@PatchMyPC]

Thanks for watching!

[@rajeevbisht3437]

Really helpful, as always thanks..

[@PatchMyPC]

Thanks for watching!

[@darvinist87]

Awesome series, thank you very much for them! Could you make one about client OS servicing in SCCM?

[@PatchMyPC]

Offline servicing?

[@imranawan9341]

Great video. Would you be kind enough and create a video on MBAM Bitlocker... Or just Bitlocker OSD please... Not that much material on you tube

[@PatchMyPC]

I do have that of the list of things to cover.

[@Shloeb]

Awesome Content Justin. I always learn something new from your videos. :) Do you have CMPivot on your list?

[@PatchMyPC]

Yeah! May what for some of the new builds thought there's a lot of new things coming out.

[@michaelflowers5862]

This is great video. I was wondering if there is a way to what objects are in a scope.

[@PatchMyPC]

Not sure I understand the question? "if there is a way to what objects are in a scope?"

[@mrgarak777]

Thanks for the great video. Did u try to start RBA viewer on Microsoft Endpoint Configuration Manager? I can't possibly make it. Any help pls.

[@PatchMyPC]

I have used RBA viewer in the past.