Installation permissions

Installation permissions allow users or groups to modify different aspects of an installation’s properties. By default, the Master Auditor and the management database administrator have Full Control over the installation and can assign the following permissions to other users and groups:

This permission	Enables trustees to do this
Full Control	Perform all administrative tasks on the selected installation and assign permissions to other users and groups.
Change Permissions	Add, modify, or remove Active Directory users and groups that have specific permissions. A user or group granted this permission can display the properties for the installation, then click the Security tab to select permissions for other users and groups.
Modify Name	Modify the name of the selected installation. A user or group granted this permission can display the properties for the installation, then click the General tab to change the installation name.
Manage Management Database List	Add or remove a management database for the selected installation. A user or group granted this permission can right-click the installation name in Audit Manager and select Management Databases to add or remove a management database. Deleting the management database from Microsoft SQL Server requires additional SQL Server permissions.
Manage Audit Store List	Add, modify, or remove audit stores and audit store databases for the selected installation. A user or group granted this permission can use the Add Audit Store wizard or right-click the installation name in Audit Manager, select Management Databases, then click Properties to add or remove sites or subnets associated with the installation.
Manage Collectors	Add, modify, or remove collectors for the selected installation.
Manage Audited Systems	Add, modify, or remove audited computers for the selected installation.
Manage Audit Roles	Add, modify, or remove audit roles for the selected installation.
Manage Queries	Add, modify, or remove queries for the selected installation.
Manage Publications	Add, modify, or remove publication locations in Active Directory for the service connection point associated with the selected installation. A user or group granted this permission can display the properties for the installation, then click the Publication tab to change the publication location in Active Directory for the installation. A user or group granted this permission can also update the information stored in Active Directory to keep the information in Active Directory synchronized with the information stored in the management database. However, users or groups with this permission must have sufficient Windows rights to be able to update objects in Active Directory.
Manage License	Add or remove license keys for an installation. A user or group granted this permission can display the properties for the installation, click the General tab, then click Details to manage licenses for the installation.
Modify Notification	Enable or disable the audit notification message for the selected installation. A user or group granted this permission can display the properties for the installation, then click the Notification tab to manage the notification message and image for the installation.
Modify Audit Options	Enable or disable video capture auditing for the selected installation. Control whether users are allowed to update the review status of their own sessions. Control whether users are allowed to delete their own sessions. A user or group granted this permission can display the properties for the installation, then click the Audit Optionstab to manage installation-wide auditing options.
View	Enable read-only permission for the selected installation. If a user has only View permission, they can see all the auditing components in the Audit Manager console, but they do not have access to audited sessions nor can they change any installation details.