Permissions example: Delay patch auto approvals

This example describes how to set the user permissions in N-able N-central so that a technician can configure a delayed patch approval. Delaying patch auto approvals enables a technician to configure auto approvals for patches and set a time post-release when they are approved for installation.

The permissions in this topic are to only allow specific functions for the user. You can add additional permissions as needed to create a more robust role.

Setting up this type of permissions involves:

• Creating an access group to include the customers the technician can monitor.
• Set the read-only permissions in a role.
• Create a user that is connected to the access group and role created.

Create an access group

An access group is a collection of customers or a collection of devices. The access group defines what customers and devices the technician will see.

1. Click Administration > User Management > Access Groups.
2. Click Add > By Customers.
3. Enter a name and description for the group.
4. Select customers from the list.
5. Click Save.

Set the permissions in a role

A role is a collection of permissions. For this role, you want the technician to be able to set up a delayed patch approval.

1. Click Administration > User Management > Roles.
2. Click Create Role.
3. Enter a name and description, and select the permissions needed for the role.
4. Scroll down to the Devices section.
5. In the Configuration > Patch section, set Patch Approval and Patch Configuration to Manage.
6. In the Configuration > Monitoring section, set Filters and Rules to Manage.
7. Click Save.

Create and apply to a user

With the access group and permissions defined, you need to either create a new user, or apply these settings to the user.

1. Click Administration > User Management > Users.
2. Click Create User to add a new user, or click the Login Name of an existing user.
3. On the Roles tab, click Assign Roles.
4. Click the check box for the new role and click Assign.
5. Click the Access Groups tab and click Assign Access Groups.
6. Click the check box for the new access group and click Assign.
7. Click Save.

When the technician logs into N-able N-central, they will be able to configure a delayed approval for patches.

As other customers come online for monitoring, you only need to update the access group to include the new customers or sites.