與使用者角色設定檔相關聯的操作Operations associated with user role profiles

重要

已不再支援此版本的 Operations Manager,建議升級至 Operations Manager 2019This version of Operations Manager has reached the end of support, we recommend you to upgrade to Operations Manager 2019.

本主題提供 System Center Operations Manager 中與各設定檔建立關聯的作業清單。This topic provides a list of the operations in System Center Operations Manager that are associated with each profile.

報表操作員Report Operator

報表操作員設定檔包含專為需要存取報表的使用者而設計的一組權限。The Report Operator profile includes a set of privileges designed for users who need access to reports. 以報表操作員設定檔為基礎的角色,會根據其設定的領域,授予成員檢視報表的能力。A role based on the Report Operator profile grants members the ability to view reports according to their configured scope.

  • 擷取管理群組的資料倉儲執行個體Retrieve the instance of the data warehouse for the management group

  • 寫入至我的最愛報表Write to favorite reports

  • 刪除我的最愛報表Delete favorite reports

  • 讀取我的最愛報表Read favorite reports

  • 更新我的最愛報表Update favorite reports

  • 讀取報表Read reports

  • 執行報表Run reports

  • 存取 Application AdvisorAccess Application Advisor

唯讀操作員Read-Only Operator

唯讀操作員設定檔包含專為需要唯讀存取警示和檢視的使用者而設計的一組權限。The Read-Only Operator profile includes a set of privileges designed for users who need read-only access to alerts and views. 以唯讀操作員設定檔為基礎的角色,會根據其設定的領域,授予成員檢視警示和存取檢視的能力。A role based on the Read-Only Operators profile grants members the ability to view alerts and access views according to their configured scope.

  • 讀取警示Read alerts

  • 擷取管理群組的資料倉儲執行個體Retrieve the instance of the data warehouse for the management group

  • 讀取解決狀態Read state of a resolution

  • 讀取連接器的執行個體Read instance of a connector

  • 讀取主控台工作Read console tasks

  • 列舉診斷物件Enumerate diagnostic objects

  • 列舉診斷的結果Enumerate the results of diagnostics

  • 列舉管理組件中定義的探索物件Enumerate discovery objects as defined in a management pack

  • 讀取探索規則Read discovery rules

  • 讀取事件Read events

  • 寫入至我的最愛主控台工作Write to favorite console tasks

  • 刪除我的最愛主控台工作Delete favorite console tasks

  • 列舉我的最愛主控台工作Enumerate favorite console tasks

  • 更新我的最愛主控台工作Update favorite console tasks

  • 寫入我的最愛檢視Write favorite views

  • 刪除我的最愛檢視Delete favorite views

  • 列舉我的最愛檢視Enumerate favorite views

  • 更新我的最愛檢視Update favorite views

  • 列舉監視物件Enumerate monitoring objects

  • 列舉監視類別Enumerate monitoring classes

  • 列舉監視關聯性類別Enumerate monitoring relationship classes

  • 列舉管理組件Enumerate management packs

  • 列舉監視類型Enumerate monitor types

  • 列舉模組類型Enumerate module types

  • 列舉監視Enumerate monitors

  • 列舉覆寫Enumerate overrides

  • 列舉效能資料Enumerate performance data

  • 列舉管理組件中定義的探索物件Enumerate discovery objects as defined in a management pack

  • 列舉過去復原的狀態Enumerate the status of past recoveries

  • 列舉監視物件之間的關聯性Enumerate relationship between monitored objects

  • 列舉規則Enumerate rules

  • 列舉已儲存的搜尋Enumerate saved searches

  • 更新已儲存的搜尋Update saved searches

  • 寫入至已儲存的搜尋Write to saved searches

  • 刪除已儲存的搜尋Delete saved searches

  • 列舉狀態Enumerate state

  • 允許存取已連線的管理群組Allows access to connected management groups

  • 列舉檢視Enumerate views

  • 列舉檢視類型Enumerate view types

  • 檢閱應用程式監視警示1Review application monitoring alerts1

1 角色的權限領域可以調整。1 Permissions scope can be fine-tuned for the role.

運算子Operator

操作員設定檔包含專為需要存取警示、檢視和工作的使用者而設計的一組權限。The Operator profile includes a set of privileges designed for users who need access to alerts, views, and tasks. 以操作員設定檔為基礎的角色,會根據其設定的領域,授予成員與警示互動、執行工作和存取檢視的能力。A role based on the Operators profile grants members the ability to interact with alerts, run tasks, and access views according to their configured scope. 除了下列權限之外,操作員設定檔還包含唯讀操作員設定檔中的所有權限。The Operator profile contains all of the privileges found in the Read-Only Operator profile in addition to those listed below.

  • 更新警示Update alerts

  • 執行診斷Run diagnostics

  • 建立我的最愛工作Create favorite tasks

  • 刪除我的最愛工作Delete favorite tasks

  • 列舉我的最愛工作Enumerate favorite tasks

  • 更新我的最愛工作Update favorite tasks

  • 執行復原常式Run recovery routines

  • 更新維護模式設定Update maintenance mode settings

  • 列舉通知動作Enumerate notification actions

  • 刪除通知動作Delete notification actions

  • 更新通知動作Update notification actions

  • 列舉通知端點Enumerate notification endpoints

  • 列舉通知收件者Enumerate notification recipients

  • 刪除通知收件者Delete notification recipients

  • 更新通知收件者Update notification recipients

  • 列舉通知訂閱Enumerate notification subscriptions

  • 刪除通知訂閱Delete notification subscriptions

  • 更新通知訂閱Update notification subscriptions

  • 列舉工作Enumerate tasks

  • 列舉工作狀態Enumerate task status

  • 執行工作Run tasks

  • 執行監視相容性檢查工作1Run monitoring compatibility check task1

    注意

    建立報表檔案需要檔案/資料夾的其他權限。Additional permissions are required for files/folders to create report files.

  • 檢閱應用程式監視警示Review application monitoring alerts

  • 關閉應用程式監視警示1Close application monitoring alerts1

1 角色的權限領域可以調整。1 Permissions scope can be fine-tuned for the role.

進階操作員Advanced Operator

進階操作員設定檔包含除了操作員權限之外,專為需要存取監視設定有限調整的使用者而設計的一組權限。The Advanced Operator profile includes a set of privileges designed for users who need access to limited tweaking of monitoring configurations in addition to the Operators privileges. 以進階操作員設定檔為基礎的角色,會授予成員在設定的領域內為特定目標或目標群組覆寫規則和監視設定的能力。A role based on the Advanced Operators profile grants members the ability to override the configuration of rules and monitors for specific targets or groups of targets within the configured scope. 除了下列權限之外,進階操作員設定檔還包含操作員與唯讀操作員設定檔中的所有權限。The Advanced Operator profile contains all of the privileges found in the Operator and Read-Only Operator profiles in addition to those listed below.

  • Update management packsUpdate management packs

  • 列舉範本Enumerate templates

  • 使用覆寫自訂 APM 設定1Customize APM configuration with the overrides1

  • 執行監視相容性檢查工作1Run monitoring compatibility check task1

    注意

    建立報表檔案需要檔案/資料夾的其他權限。Additional permissions are required for files/folders to create report files.

  • 檢閱應用程式監視警示1Review application monitoring alerts1

  • 關閉應用程式監視警示1Close application monitoring alerts1

1 角色的權限領域可以調整。1 Permissions scope can be fine-tuned for the role.

應用程式監視操作員Application Monitoring Operator

應用程式監視操作員設定檔包含針對需要存取 Application Diagnostics 的使用者設計的一組權限。The Application Monitoring Operator profile includes a set of privileges designed for users that need access to Application Diagnostics. 以應用程式監視操作員設定檔為基礎的使用者角色,會授予成員在 Application Diagnostics Web 主控台中檢視應用程式監視事件的能力。A user role based on the Application Monitoring Operator profile grants members the ability to see the Application Monitoring events in Application Diagnostics web console.

  • 存取 Application DiagnosticsAccess Application Diagnostics

作者Author

作者設定檔包含專為撰寫監視設定而設計的一組權限。The Author profile includes a set of privileges designed for authoring monitoring configurations. 以作者設定檔為基礎的角色,會授予成員在設定的領域內建立、編輯和刪除監視設定 (工作、規則、監視和檢視) 的能力。A role based on the Authors profile grants members the ability to create, edit, and delete monitoring configuration (tasks, rules, monitors, and views) within the configured scope. 為了方便起見,也可以將作者設為具有依群組設定領域的進階操作員權限。For convenience, Authors can also be configured to have Advanced Operator privileges scoped by group. 除了下列權限之外,作者設定檔還包含進階操作員、操作員與唯讀操作員設定檔中的所有權限。The Author profile contains all of the privileges found in the Advanced Operator, Operator, and Read-Only Operator profiles in addition to those listed below.

  • 建立管理組件Create management packs

  • 刪除管理組件Delete management packs

  • 列舉執行身分設定檔Enumerate Run As Profiles

  • 使用覆寫自訂 APM 設定1Customize APM configuration with the overrides1

  • 撰寫新的 APM 工作流程1Author new APM workflows1

  • 執行監視相容性檢查工作1Run monitoring compatibility check task1

    注意

    建立報表檔案需要檔案/資料夾的其他權限。Additional permissions are required for files/folders to create report files.

  • 檢閱應用程式監視警示1Review application monitoring alerts1

  • 關閉應用程式監視警示1Close application monitoring alerts1

1 角色的權限領域可以調整。1 Permissions scope can be fine-tuned for the role.

系統管理員Administrator

系統管理員設定檔包含對 Operations Manager 的完整權限。The Administrator profile includes full privileges to Operations Manager. 系統管理員設定檔不支援設定領域。No scoping of the Administrator profile is supported. 除了下列權限之外,系統管理員設定檔還包含作者、進階操作員、操作員與唯讀操作員設定檔中的所有權限。The Administrator profile contains all of the privileges found in the Author, Advanced Operator, Operator, and Read-Only Operator profiles in addition to those listed below.

  • 建立解決狀態Create a resolution state

  • 刪除解決狀態Delete a resolution state

  • 更新解決狀態Update a resolution state

  • 部署代理程式Deploy an agent

  • 修復或更新已安裝的代理程式Repair or update an installed agent

  • 解除安裝代理程式Uninstall an agent

  • 列舉代理程式設定Enumerate agent settings

  • 更新代理程式設定Update agent settings

  • 列舉代理程式Enumerate agents

  • 開始或停止透過 Proxy 健全狀況服務管理電腦或裝置Start or stop managing computers or devices via a proxy health service

  • 列舉透過 Proxy 健全狀況服務管理的電腦或裝置Enumerate computers or devices managed via a proxy health service

  • 插入電腦或裝置的新執行個體Insert a new instance of a computer or device

  • 刪除電腦或裝置的執行個體Delete an instance of a computer or device

  • 執行探索工作Run discovery task

  • 建立事件Create events

  • 列舉全域設定Enumerate global settings

  • 更新全域設定Update global settings

  • 匯出管理組件Export management packs

  • 列舉管理伺服器Enumerate management servers

  • 刪除通知端點Delete notification endpoint

  • 更新通知端點Update notification endpoint

  • 建立效能資料Create performance data

  • 建立執行身分帳戶Create Run As Accounts

  • 刪除執行身分帳戶Delete Run As Accounts

  • 列舉執行身分帳戶Enumerate Run As Accounts

  • 更新執行身分帳戶Update Run As Accounts

  • 建立執行身分帳戶與執行身分設定檔之間的對應Create mappings between Run As Accounts and Run As Profiles

  • 刪除執行身分帳戶與執行身分設定檔之間的對應Delete mappings between Run As Accounts and Run As Profiles

  • 列舉執行身分帳戶與執行身分設定檔之間的對應Enumerate mappings between Run As Accounts and Run As Profiles

  • 更新執行身分帳戶與執行身分設定檔之間的對應Update mappings between Run As Accounts and Run As Profiles

  • 建立已連線的管理群組Create connected management groups

  • 刪除已連線的管理群組Delete connected management groups

  • 列舉使用者角色Enumerate user roles

  • 刪除使用者角色Delete user roles

  • 更新使用者角色Update user roles

  • 寫入我的最愛報表Write favorite reports

  • 刪除我的最愛報表Delete favorite reports

  • 讀取我的最愛報表Read favorite reports

  • 更新我的最愛報表Update favorite reports

  • 讀取報表Read reports

  • 執行報表Run reports

  • 執行 APM 精靈或變更 APM 設定Run APM Wizard or change APM settings

  • 存取 Application DiagnosticsAccess Application Diagnostics

  • 存取 Application AdvisorAccess Application Advisor

  • 撰寫新的 APM 工作流程Author new APM workflows

  • 使用覆寫自訂 APM 設定Customize APM configuration with the overrides

  • 執行監視相容性檢查工作Run monitoring compatibility check task

  • 檢閱應用程式監視警示Review application monitoring alerts

  • 關閉應用程式監視警示Close application monitoring alerts

  • 控制應用程式監視的存取權限Control access rights to application monitoring

  • 建立群組Create group

  • 編輯群組Edit group

  • 刪除群組Delete group

報表安全性系統管理員Report Security Administrator

報表安全性系統管理員設定檔包含設計用來啟用 SQL Server Reporting Services 安全性與 Operations Manager 整合的一組權限。The Report Security Administrator profile includes a set of privileges designed to enable the integration of SQL Server Reporting Services security with Operations Manager.

  • 匯出管理組件Export management packs

  • 列舉管理組件中定義的類別Enumerate classes as defined in the management packs

  • 列舉管理組件Enumerate management packs

  • 執行報表Run reports

  • 列舉規則Enumerate rules

  • 存取 Application AdvisorAccess Application Advisor

後續步驟Next steps

  • 請檢閱實作使用者角色,以了解 Operations Manager 中定義來管理授權與安全性的設定檔,以及設定使用者角色來執行系統管理和存取管理群組中的操作資料。Review Implementing User Roles to understand the profiles defined in Operations Manager to manage authorization and security, and configure user roles to perform administration and access to operational data in the management group.