Run Component Procedures Permission

When you assign Run Component Procedures permissions to a user group, members of the user group are able to execute plans that are generated by directly running component procedures. These plans are created from component procedures and are stored in the /system/autogen folder. Run Component Procedures permissions is assigned from the folder that contains the component that generated the plans.

Run Component Procedures permission is granted automatically when a user is granted Create, Edit, Delete permission. However, you might want to exclusively grant the Run Component Procedures permissions when you want a user group to have permission to run only component procedures or plans that have already been written. This permission is particularly useful if you have one user writing plans and another user running them, and you don't want the users to perform tasks outside of their functional expertise.

Run Component Procedures permission is an extension of the Allow on Host Set permission. You can only run component procedures on the host set defined by the Allow on Host Set permission.

If component procedures contain variable sets that require user input, the user who runs the component procedure will need to belong to a user group that has Check In Current and Configure permission.

There are a few scenarios where you need to be particularly careful about assigning Run Component Procedures permission to user groups.

• Large user groups in folders that contain sensitive materials (for example, system services that perform potentially destructive operations are usually granted execution on all host sets)

• User groups that have permissions to run plans on large host sets