HOW TO: Delegate Permissions on Access templates and Policy Objects Links (4339046)

It is possible to allow delegated admins in Active Roles to view ATLinks and POLinks?

WORKAROUND

To delegate the ability to view ATLinks and POLinks, create a custom Access Template with Allow Read Control for the desired class.
Note: it should be assigned over the securable objects (not over Access Templates) where links exist for: Domain, containers, etc. In this case if the delegated user selects Administration on the objects and select the Policy Object or Access Template Security then that trustee will be able to view the assigned (linked) Access Templates and Policy.

1. In the Active Roles Console, expand Configuration | Access Templates
2. Create a new Access Template.
3. Follow the wizard and set an allow Read control for the desired class.
4. Delegate control over the desired objects using this class.

If it is desired to allow viewing of the Access Template linkages in the Advanced Details pane while viewing an Access Template, it will be necessary to delegate control over the Configuration node using the builtin Configuration - View Configuration Access Template as well as an Access Template using the following permission for all classes:

Read control

List object

List contents