Question
FAA
US
Last activity: 21 Jan 2022 11:11 EST
Disable creation of Operators
On Pega (Government Platform) 8.4.4. We use SAML SSO, and new Operators are created automatically using a model operator.
SAs are assigned the "Author" access group in our standard base app after creation, and they can create new applications, which is good. However, they can create and modify operators as well. I would like to remove that ability from the Author access group.
It appears that the Author access group is based on [standard base app].Administrator and PegaRULES:SecurityAdministrator roles. If I remove PegaRULES:SecurityAdministrator from the Author access group, will that do the trick? Or is my whole approach flawed?
Thanks in advance.
Coforge DPA
GB
@Alan Thompson You can create a new Access role for the access group and customize it accordingly.
Regards
Bhavya
Ernst & Young LLP
MT
Follow these steps -
1. Create a new access role for that Access group.
2. Create a Access Deny rule with the same access role and Data-Admin-Operator-ID (Modify and Delete instance field on Deny rule should be set to 5. Leave rest of the fields blank).
3. Include that access role in SA's access group.
Thanks
FAA
US
@Nirmalya.SenSharmaThank you very much for the specific response.
I created an access role for Fnd:Authors called Fnd:AuthorRestricted.
I created an Access Deny rule for Fnd:AuthorRestricted of Data-Admin-Operator-ID and set modify and delete controls to 5.
Oddly enough, this configuration does not restrict anyone with that access group from creating an operator.
However, when using the New Application Wizard, after selecting "what type of application...", the following error occurs: You lack the required access to create a new application".
I must have done something wrong when I followed your steps. Any suggestions for what I can check?
Thanks, Alan