RhoSysAdmin Posted January 31, 2018 Report post Posted January 31, 2018 We are testing deployment of applications that require administrator approval. I would like to enable the Service Desk to approve these requests. But I don't want to make them full blown admins, or even application administrators. What kind of custom (or built-in) security role do I need to create, and do I include the computer or user collections (or both) in the scope for this role? We're running SCCM current branch 1706. Quote Share this post Link to post Share on other sites More sharing options...