I would like to setup a role in SCCM that would allow my technicians to delete a device from SCCM when it needs reimaging and add and remove the devices from a collection.
I do not want them to be able to change or add collections, nor do I want them to get into anything other than Assets and Compliance.
Ultimately, I would like to limit them to just see the Devices and Collections.
I attempted to create a Security Role and take away a lot of the permissions, but still too broad.
Are these things possible, and if so what settings to I need to add/remove?
