Hello,
I would like to be able to create a small number of user accounts which are not able to
perform any self service (change passwd, set ssh pub keys), while leaving the default self
service abilities enabled for most users. It appears that it is not possible to remove or
negate permissions via privileges or roles. It also appears that it is not possible to
remove the global self service privileges and replace them with a role as it isn't
possible to constrain generic privileges to "self". Is that correct? Is there
any existing way to achieve non-self-service users?
Thanks,
-Josh
Show replies by date