Return
-
Title
Access template 'Special - Block Permission Inheritance' not functioning as expected -
Description
Consider the following scenario:
- An admin group has delegated 'Users - Full Control' permissions to the domain
- A Managed Unit is created that contains explicitly defined Users
- The admin group has the 'Special - Block Permission Inheritance' and 'Users - Read All Properties' Access Templates assigned to the Managed Unit
The permissions work as intended, and the admin group members are unable to modify any properties of the users within the managed unit. However, they are able to MOVE and DELETE the users inside of the managed unit.
-
Cause
This has been identified as Product Defect TF00674621. -
Resolution
STATUS
Waiting for fix in a future release of Active Roles.
-
Change Request
TF00674621