Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
patryk_s
Explorer

Restrict the option to create new policies

Hi all,

is it possible to restrict the option to create a new policy inside a domain for some specific users?

I would like to restrict the users that has the possibility to create completely new policies.
"Normal users" should still be able to edit or create new rules inside already existing policies, do policy installs, check the logs, etc.

I´m using MDS R80.40

Thanks.

0 Kudos
2 Replies
PhoneBoy
Admin
Admin

You have to create a permission profile that looks something like this:

Screen Shot 2021-09-16 at 2.06.15 PM.png

This permission profile will allow editing by users with this specific profile but will not allow the creation of new layers/policy packages.
All the policy layers will then need to have that permission profile assigned to it.

Screen Shot 2021-09-16 at 2.19.28 PM.png

the_rock
Authority
Authority

As phoneboy indicated, thats the place where you do those restrictions. There is also section for additional policies in "access control" tab, so just make sure you change those to read, rather than write.

0 Kudos