Explicit deny group(s)

[DanR.]

Is there a way to explicitly deny a group permissions to a given type?

The reason I ask is we have hundreds of Integrity Manager users and most of them are not in any group. I am creating a new type for several special groups, but this groups do not need to see any other type except this new tpye that I'm creating.

I know of no way to do this, except add all those other users in a new group and give them permission to the types they need.

Thanks,

Dan

[KaelLizak]

Hi Dan,

Your method of creating another group is exactly the way that we'd recommend for limiting the creation of certain items to only a particular group.

Regards,

Kael

[jgorsline]

You can set up ACLs to control permissions in all kinds of ways. Check out the Integrity Server Administration Guide for more details. Page 128 is a good place to start.