Adding Role Conditions Based on Collections

You can add an include or exclude role condition based on System Center Configuration Manager collections.

To create a new role based on collections:

1. Perform the steps in Creating a New Role.
2. Open the Conditions tab of the Role Properties dialog box. The Group and OU subtab opens.
3. Open the Collections tab.

Note:You can create two types of “collection” conditions: user collections and machine collections. However, when defining a condition on a role, App Portal only supports user collection conditions. This is because roles are associated with the users, not with machines.

4. Click Add Condition. The Add Condition dialog box for collections opens.

5. In the Enter a collection name search box, enter a word or phrase.
6. Click Search. Search results are displayed.

7. Select item(s) in the search results list.
8. Select either Include Collections or Exclude Collections from the list.
9. Click Select.
10. Close the Add Condition dialog box. On the Collections tab, the selected collection names are now listed.
11. In the Enforcement column, select either Include Property or Exclude Property.
12. Click Save Role.

See Also