With the Configuration Manager 2012 extension pack you currently must be a member of Enterprise Admins to be able to Publish updates from within the Config Mgr Administration console. This obviosuly opens up potential to edit system configurations also. There needs to be an Operator type role that does have the access to publish packages and do general day to day patching activities but not to have access to system configurations.
↧
