If the only reason these Admins use Pega is to perform deployments, then they could use Deployment Manager (or a third-party DevOps orchestration suite) to perform deployments via API calls and eliminate their need for access to Dev Studio. As such, you could take Dev Studio off the portal list on their Access Group.
It's hard to imagine a role-based access control configuration that allows Modify (import) of rules whilst blocking Open, as this will surely block the Admins from being able to, for example, open the Studio and get to the Import wizard.
Posted: 1 year ago
Posted: 16 Feb 2021 6:32 EST
Anthony Gourtay (Anthony_Gourtay)
Expert Engineer - PEGA Application Management