A role that allows the UDT user to see the up\down status of ports, mac address info etc but NOT allow them to disable\enable the ports. I have some first line ServiceDesk personnel who would benefit from seeing this information, but may not have enough network knowledge and experience to understand which ports are critical eg I don't want them disabling the uplink port on the switch to the router for site that's at the other end of the country! (no hasn't happened yet but its just a matter of time...…and yes the more experienced guys can make the same mistake but at least they'll deserver the telling-off!)
