SoftwareCentral · Application Manager

Package Security Groups

A Package Security Group is a set of software that can be given to security roles together. It brings the applications, packages and Intune apps in the group, and it decides which roles may see and manage them. Use this page to create the groups, see which roles can reach each one, and check what each group grants.

Menu: Security Groups for roles Best practice Troubleshooting

1 What it is for

Use package security groups to say which software a role may use, without setting it application by application.

  • A group is granted to roles on the Security Roles page, on the Software tab.
  • A role sees and manages the software in the groups it has been given.
  • An application template can belong to groups too. The Templates column shows which templates use each group.

2 The page at a glance

The header shows the number of groups and the button to add one. The list shows which roles can see each group and what it grants.

The Package Security Groups list with the columns Name, Visible to, Grants and Templates, and the Edit and Delete buttons
The Package Security Groups list. Visible to names the security roles that can use the group. Grants counts the items it gives access to, and Templates counts the templates that use it. Edit and Delete are on the right of each row.

3 Find a group

Type a name in the search box to narrow the list. Click Filters to narrow it by role or by what the group grants.

The Filters panel with Visible to role and Grants
The Filters panel: Visible to role and Grants.
FilterChoices
Visible to roleAny role, or one security role. The list of roles can be searched by typing.
GrantsAny, Something (the group grants at least one item) or Nothing yet (the group is empty).
Shop only groups are not in this edition The full SoftwareCentral product also has an Applies to column and filter for shop-only groups. Application Manager Only does not have shop-only groups, so the column and filter are not shown here.

4 Create and edit a group

  1. Click Add Package Security Group to create a group, or click Edit on a row to change one.
  2. Type the Name. The name is what you see when you pick the group in a security role.
  3. On the Security roles tab, tick the roles that may use the packages in the group.
  4. Check the What it grants and Templates tabs. Their counts show how many items and templates are in the group.
  5. Click Save. Your own role is always added when you save.
The Edit package security group window on the Security roles tab, with a list of roles and ticks
The edit window of a group, on the Security roles tab. The top shows the number of roles, items granted and templates. Cancel closes without saving.

5 Fields and buttons

ElementWhat it does
Add Package Security GroupOpens an empty group in the edit window.
NameThe name of the group. Required.
Security roles tabThe roles that may use the packages in the group. Tick a role to give it the group.
What it grants tabThe items the group gives access to. The count shows how many.
Templates tabThe application templates that use the group.
FiltersNarrows the list by role and by what the group grants.
Export CSVDownloads all groups that match the search and filters.
EditOpens the group in the edit window.
DeleteDeletes the group. Use it only when no role or template needs the group.
Save / CancelKeeps the changes, or closes the window without keeping them.

6 Best practices

TopicRecommendation
Name groups by contentName a group after the software or the team it serves, so the name still makes sense when it is picked in a role.
Separate test softwareKeep test packages in their own group and give it only to the testers' role. Give the production group to the roles that need it.
Check empty groupsSet Grants to Nothing yet to find groups that give access to nothing, and remove them or fill them.
Look before you deleteCheck the Templates column and the Visible to column first. A group that a template or a role uses is still in use.
Review accessFilter by a role to see every group it can reach. Export the list for an access review.

7 Troubleshooting

SymptomCause and what to do
A role cannot see software that is in a groupThe group must be ticked for that role on its Security roles tab, and the role must have the group ticked on its Software tab in Security Roles. Choose the role again or sign in again after the change.
Grants shows Nothing yetThe group has no items. Open it with Edit and add the items on the What it grants tab.
Templates shows a dashNo application template uses the group. This is normal for a group used only for roles. A template that should use it must be set to use the group.
The Applies to column or filter is missingThis is expected in Application Manager Only, which does not have shop-only groups.
The list shows No items match your criteriaA filter or the search is hiding every group. Clear the filters and the search box.