How to Restrict Who Can be Granted a Permission

It is increasingly common for department managers to have the authority to assign and modify application access for their employees. However, you may sometimes need to limit which employees are eligible to receive a specific permission.

This article describes how to use the "Can be given permission" feature to create a ruleset that defines which users can be granted a specific permission.

Menettely

1. Navigate to Access control and select the relevant grouping.

2. Click Edit on the grouping.

3. Find the permission you want to restrict in the list. In the Can be given permission column, click + Create.

4. Configure the ruleset to define which users are eligible to receive this permission.

5. Napsauta Tallenna.

After configuration, the permission will show that a rule is in place, as seen in the example below.

Warning: The person who assigns the permission must also be included in the ruleset for "Can be given permission". It is a security best practice that a user cannot assign permissions for which they do not qualify themselves.