You can't prevent new systems, but ...I don't understand this statement.
I want everyone who passes the authentication phase to edit systems.
I just want to lock everyone, but admins, out of distros, profiles, and repos.
I still don't know if that's possible.
I feel like I'm communicating clearly what I want to do. Here is what I want to do: Allow users listed in user.conf [admins] section to do everything, but for everyone else: allow list on distros, profiles, repos, kickstarts list/copy/modify/new/remove/save) on systems deny everything else (copy/modify/new/remove/save) on distros, profiles, repos, kickstarts Can this be done? Yes or No
If yes, how do you do it?