KACE added the task chains and the power behind them is pretty big for the ones who know how to correctly use them. I was chatting with an engineer recently and one of them provided me the list of minimum permissions that need to be in place in a role to see and run Task Chains.
Here you have them:
Inventory
* Devices= READ
Distribution
ALL WRITE
Scripting
ALL WRITE
Security
* Patch Management= WRITE
Note
Update as of 11/14/2019
Some users were noting that they won't be able to see the Save, Run now, etc. I played myself a lot more and got it to work with this. Still without providing full Admin rights to the UI.
I did tried all the combinations possible between the Scripting / Managed Install / Patching Role permissions and the only way the user is able to execute or create a new Task chain is by having write access to each one of those permissions, this is the intended behavior since the user is not only reading but also executing.
As Ken explained it would be appreciated if you can submit this enhancement request so this can be evaluated to be added into a future release.
Please let me know if you have any additional questions.
Thank you,
Carlos McDonald
Quest
support.quest.com - kjenne 5 years ago
https://kace.uservoice.com/forums/82699-sma-k1000/suggestions/38105521-enable-task-chains-to-be-run-from-or-like-scripts - kjenne 5 years ago