I have created a read-only operator. When i access using the webconsole, it is only restricted to only selected views. But if I logon to the Management server with that account, the user has full admin access on the scom console. Why would that user has the full SCOM admin access when logon to Management server console?
Same case happen to gateway management server, I have installed scom console at gateway server, when launch the console, it doesn't request my ID, and it automatically has full admin access to do anything on the scom console.