We try to minimize the permissions Administrative Users have. Today an admin notified me that they could not view resultant client settings, so I found the minimum rights required for this. We start with Read-Only Analyst, and build from there.
Using RBA Viewer, I found it’s related to the Dialog box “ResultantDeviceSettings”
Not sure what class it would be in, a Bing search found a webpage (https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/96/21/metablogapi/AssetManagementNode_6BD74C7E.xml) with the following xml:
So I knew it was related to the Collection class.
Trial and error revealed I need to set “Provision OOB” = Yes.
Using this one permission with Read-Only Analyst allows an admin to view Resultant Client Settings.