How to limit user capability in Sav Role

[mugwumba]

Hello, I am trying to give end users the ability to request access for others. However, I only want them to request entitlements but not AD accounts or remove accesses. How do I accomplish this.

[RakeshMG]

While requesting an access for others you will not be able to directly raise request for entitlements. You have to select the account to raise request for Entitlements.

But you can use following config in Admin -> Security Systems -> Endpoints

Where in user cannot modify or remove the account.