Phased deployments not visable in monitoring node

Fernandez, K 6 Reputation points
2021-12-20T19:04:16.487+00:00

We are starting to dabble in Phase Deployments. We have no issues creating them but my admins are unable to see them under the Monitoring node.

\Monitoring\Overview\Phased Deployments

As the Full Admin, I can see them, but they cannot. I changed their scope to ALL and still nothing.

Any suggestions on what security permissions I could be missing.

Microsoft Security | Intune | Configuration Manager | Other
0 comments

5 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. AllenLiu-MSFT 49,441 Reputation points Microsoft External Staff
    2021-12-21T01:59:48.6+00:00

    Hi, @Fernandez, K
    Thank you for posting in Microsoft Q&A forum.

    It's not related to security scope, it's security role, you may create a custom role and set the permissions of PhasedDeployment, the admins need the read permission to view them in monitoring node.
    159122-1.jpg

    How to create a custom role: select a built-in role and click "Copy", then edit it.

    Notes: The easiest way is to give the admins Full Administrator, but I think it's not a good choice for you.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

    0 comments
  2. Fernandez, K 6 Reputation points
    2021-12-21T05:59:29.263+00:00

    Thank you for responding but it is more than that.

    These admins have to OS Deployment Manager built in role that has Phased Deployments security permissions and it still is not working.

    But I will create a custom role and see if maybe something is wrong with the built in role permissions.

    159228-2021-12-20-21-55-49.jpg

    159126-2021-12-20-21-56-37.jpg

    Was this answer helpful?

    0 comments
  3. Fernandez, K 6 Reputation points
    2021-12-21T06:08:59.863+00:00

    I created a Phase Deployment role with the necessary permissions and added that to my test account and it still doesn't show the Phased Deployments under the Monitoring node. :( Whomp Whomp! I will probably have to submit a support case in the morning.

    Was this answer helpful?

    0 comments
  4. AllenLiu-MSFT 49,441 Reputation points Microsoft External Staff
    2021-12-21T07:45:52.043+00:00

    Hi, @Fernandez, K

    I test in my lab, and like you said, Phased Deployments is not enough, even I give all built-in security roles(except Full Administrator) to a user, Phased deployments still not show in monitoring node.
    Only with Full Administrator, Phased deployments can show in monitoring node.

    Then I try to use RBA Viewer, I found Read permission for Collection is need for phased deployment, you may add it to see if it helps:
    159209-1.jpg

    Was this answer helpful?

  5. dridley 181 Reputation points
    2026-07-16T09:44:20.3533333+00:00

    Do we know if anyone resolved this, i have the same issue and cannot resolve it?

    • I duplicated the Full Administrator role, made no changes to that duplicate role, and assigned to a user. They cannot see items in this node.
    • ConfigMgr version = 2509
    • Deployments aren't scoped, so i doubt that is the problem
    • They can see them in the Phased Deployments tab under the Software Updates node; but when looking at SMSProv.log it's a different query it's trying to run.

    The issue seems to lie with the extended RBAC query it specifically runs in the "Monitoring > Phased Deployments" node.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.