To assign permissions to users over assets in the console gives users the logical permissions over the assets. To successfully perform a task on an asset the user must also have the physical permission over the asset in the network.

If a user has permission to collect data from an asset but does not have the credentials on the physical asset, the data collection task fails.

For example, if a user is assigned the Evaluator permission over a computer, but is not given the required credentials to query the computer to collect data, the user cannot run the evaluation.