Managing End-User Self Service

With the Self Service Client application, you can publish software to Windows endpoints so that users can install software on their own without the need for IT to install them. To use the Self Service Client application on your Windows endpoints, you must create a self service profile in Deploy version 1.2 or later.

Before you begin

Create a self service profile

  1. From the Deploy menu, go to Self Service Profiles and then click Create Profile.
  2. Provide a name, add an optional description for the profile, and select the content set.
    Because of the complexities of managing permissions with multiple users, you cannot move a self service profile from one content set to another after the initial assignment.
  3. Add targets.

    Select either or both of the following targeting methods and complete the fields as needed. If you select both targeting methods, then they are joined by an OR operator. If you use multiple targets, the profile applies to endpoints that match any of the targets you specify.

    • Select Computer Groups provides a drop-down list of computer groups available to be managed in Deploy.

    • Set Targeting Criteria lets you add any Tanium question filter as a target. When you use this option, you must also select a limiting group from the Select Limiting Group drop-down list of computer groups. For example, to target endpoints in the 192.168.1.0/24 subnet, you can type Tanium Client IP Address starts with 192.168.1 in the Filter Bar or use the Filter Builder to select the Tanium Client IP Address sensor, and then apply the same filter. After that, set the All Windows 10 computer group as the limiting group to make the deployment apply to all Windows 10 endpoints with an IP address that starts with 192.168.1.

      • The Select Computer Groups and Set Targeting Criteria options are joined by an OR operator. If you use multiple targets, the deployment applies to endpoints that match any of the targets you specify. If you use Set Targeting Criteria, you must also specify a limiting group that limits all targets. For example, if you select All Laptops as the target computer group, the deployment goes to all laptops managed by Deploy. However, if you also add Tanium Client IP Address starts with 192.168.1 as the targeting criteria, and then select All Windows 10 as the limiting group, then the deployment goes to all Windows 10 devices that are either laptops or have an IP address starting with 192.168.1.

  4. (Optional) Deselect Use Latest if you want to add versions of software packages other than the latest.
  5. To choose packages or bundles to include in the profile, click Add next to the available package or bundle.
    You can also select multiple packages or bundles and click Add to add multiple packages or bundles at the same time.
    1. Select whether the package or bundle is allowed to be installed, updated, or removed in the Self Service Client application.
      By default, bundles are allowed only to be installed. Some options cannot be deselected.
    2. If a package or bundle requires a restart of the endpoint, you can select Restart Required.
  6. Click Create Profile.

View self service profiles

From the Deploy menu, go to Self Service Profiles to view all self service profiles.

This page displays all currently defined profiles and basic information about those profiles. You can expand the profile to view more detail about the profile, including the defined software packages and the allowed actions that are associated with each package. This expanded detail also shows the targeted groups or questions for the profile.

Edit a self service profile

To edit a self service profile, click the profile name and then click Edit.

Delete a self service profile

To delete a self service profile, click the profile name and then click Delete .

Track usage statistics

You can check the status of packages or bundles that are used in the Self Service Client application and track usage statistics of the Self Service Client application on endpoints.

From the Deploy menu, go to Deployments and then click Self Service. This page displays all software packages and bundles that are included in self service profiles.

Use the Self Service Client application on endpoints

The Self Service Client application lets you install, update, or remove software applications on endpoints. You can customize the End-User Self Service interface with a custom name, support link, logo, and shortcut icon. For more information about customizing the Self Service Client interface, see Tanium End User Notifications User Guide: Customizing the End-User Self Service interface.

The Self Service Client application includes the following tabs:

Catalog

On the Catalog tab, you can perform the following actions:

  • See a list of all available software applications in the catalog. You can filter to show applications to be installed, removed, or updated, or to show only the applications available to the endpoint. You can also select a gallery or list view, and that view automatically adjusts based on the resolution set on the endpoint.

  • See all active deployments, until the install, update, or removal is complete.

  • Select additional languages that you have enabled in the End User Notifications settings. For more information, see Tanium End User Notifications User Guide: Customizing the End-User Self Service interface.

  • See additional details about each available package. Hover your mouse over the information icon for each package to see additional details about the package. You can configure those details, including the name of the package, on each software package.

    For more information, see Create a software package.

Updates

On the Updates tab, you can see updates that are available for installed software applications.

History

On the History tab, you can see any completed activities that occurred on the system, as well as who initiated the activity. You can filter results by deployment type, as well as by time period.

Activity

On the Activity tab, you can see current and upcoming deployment activity. You can also select Install to start the deployment before its scheduled start time. However, you can hide upcoming deployment activity on the Activity tab by selecting Hide from Self Service Client when you configure the deployment. Similarly, if you do not select Make Available Before Start Time when you configure the deployment, then end users cannot start a deployment before its scheduled start time. For more information, see Deploy a software package or bundle.