Create client task permission sets

As an administrator, you can create permission sets for different user levels. Based on the permission sets users can either create and modify client tasks, or approve or reject tasks created by other users.

You must have administrator rights to change permission sets.

To manage task creation, you can create permission sets for users who can create and modify specific tasks. For example, you can create permission sets that allow one user to change tasks and another user permission to approve or reject those changes.

Task User permission set — The task user can create and modify specific product tasks, but the changes must be approved before the task is saved.
Task Administrator permission set — The task administrator can create and modify specific tasks, and approve or reject the changes made by task users, and other administrators.

Select Menu → User Management → Permission Sets, then click New Permission Sets.
To create the task administrator permission set, type the name, for example, taskAdminPS, then click Save.
1. Select the taskAdminPS permission set, scroll down to the Client Task Management row, then click Edit.
2. Select Can approve or decline the task changes submitted by other users, and click Save.
  This allows the task administrator to respond to others' task changes without administrator approval.
3. Scroll down to a parameter that you want to edit, for example, the Endpoint Security Common, and click Edit.
4. Select View and change policy and task settings and click Save.
  This allows the task administrator user to make task changes to Endpoint Security Common tasks.
5. Configure the edit permissions for different parameters as needed.
To duplicate the task administrator permission set and create the policy user permission set, click Actions → Duplicate.
1. Type the name of the task user permission set, for example, taskUserPS and click OK.
  A duplicate task administrator permission set is created.
2. From the Permission Sets list, click the taskUserPS permission set.
3. Scroll down to the Client Task Management row and click Edit.
4. Select No Permissions for Task Approval, and click Save.
  This setting forces the users assigned with this permission set to request approval from the administrator before they can save a new or changed policy.

Now, you have created two permission sets; one to assign to a task user and another one to assign to a task administrator.