Permissions to Create a collection

I had a customer doing some custom permission setting in System Center 2012 Configuration Manager the other week and after adding folks to a few existing security roles all was good except that these limited rights users could not create collections.  If you have looked at all the possible perms in ConfigMgr 2012 you may have seen that there are a lot and while you could test and figure this out, I figured I would share the answer to save everyone else a bit of time.

To create collections a user needs the following permissions:

  • Collection
    • Read
    • Create
    • Modify Folder
Comments (2)

  1. Ming says:

    May I know which Security Roles that actually grant permission to Create Collection?

    The user in question is in the ‘Application Administrator’ role however unable to create collection with error “you do not have permission”.


    1. TD says:

      The Quick answer is copy the ‘Application Administrator’ security role and in the collection area change Read, Create, Modify Folder to ‘YES’ then save the new Security Role with a new name.

Skip to main content