SOLVED SCCM RBAC Console Permissions

[Kave70]

We're a small IT department and our console permissions are too broad. It has recently gotten us into trouble with a click happy tech.
I need our techs to be able to install/remove the client, add devices into collections, remote in and perform the discovery data /machine policy client actions.
We use the recast right click tools, and letting them delete profiles through there is helpful too.
I've made them read-only analyists, and remote tool operators.
I'm confused about the "default scope"
Any suggestions on other roles, or troubles we might run into?
I've been trying to read and learn about the roles- any suggestions for that too would be gladly accepted.

 

[Gokul]

where do you really want permission ? what permission do you required? does your id have admin rights ?

 

[Kave70]

I've been working on giving the techs the appropriate permissions. Yes, I'm a full admin, so I haven't had any issues there. The underlying structure of our collections made things a little difficult, as to take a newly imaged computer, I had to allow the scope to be all Desktop and Server clients, which can be a bit concerning. I'm still working out the kinks with reports , but I'm getting somewhere. Using the RBA viewer has been the key.

 

[Gokul]

Have a look -

CMPivot and default scope requirements

social.technet.microsoft.com