Deploy-Only Role: Allow Users to Assign Existing Apps Without Creation or Editing Permissions

Summary

Introduce a specialized role in Patch My PC Cloud Portal that restricts users to deploying existing applications. This role would prevent them from creating or modifying apps, while still letting them manage required or available assignments to target devices. The goal is to offer a minimal-permission option, so these users can handle straightforward deployments without any risk of altering core application settings.

Use Case

1. Minimal Permissions

   • Users can only see and deploy already-created applications.

   • No ability to create, edit, or delete applications.

2. Simple Deployment

   • A limited console view showing only the deployment tasks (e.g., choosing whether an app is required or available).

   • Ensures a straightforward workflow for non-technical or lower-level staff who need to push out apps.

3. Reduced Risk

   • Eliminates concerns about accidental changes to app configurations.

   • Central admins retain full control over how apps are initially created or updated.

4. Efficient Delegation

   • Frees up senior admins’ time by allowing others to perform common deployment tasks.

   • Keeps advanced functionality limited to designated Patch My PC administrators.

By creating a deploy-only role that grants basic distribution rights but disallows deeper app changes, Patch My PC Cloud Portal can support large teams with varying levels of responsibility while maintaining security and consistency across the environment.

Create by Justin Chalfant based on a customer call on March 31, 2025