McAfee ePO Orchestrator administration question

Thanks for the response, I just need a little clarification please...

So all administrators can see and use all policies? But only policy owners can edit the policies they own? 

When you say I can set permissions by product does that means I could set permissions so that an administrator could either not see any policies or I can set it so he could see all policies?  (But I cannot set permissions that would allow him to see some but not others)

So I would have 2 SUBtrees right? and I can assign permissions and access to those in such a manner that Admin_B would not even see the Division_A Subtree, or that person would see the Directory and it would be empty?

McAfee ePO Tree

          |___

          |      Division_A Systems: (Only Admin_A can see these systems and systems within the tree)

          |                   |__

          |                         Division_A_Workstations      

          |___

          |      Division_B Systems: (Only Admin_B can see these systems)

          |

          |___

                 Other Systems: (Both Admins can see these systems)

Thanks again, really appreciate the quick response!

View the original article here