Delegate Execute Custom Command Roles

Question

Is there a way to use the "Super Manager" role and only allow the execution of certain Custom Commands?

Right now I think if I want to do that I need to create a new role with less than "Full Control" on all Objects and then allow the permissions on each object type.

I'm wondering if there is another way to do this without having to go through that. Putting a Deny doesn't seem to work and later I don't want to Deny individual actions.

Can you restrict access to a container or custom commands?

Answer 1

Hello,

For a specific existing Security Role to grant permissions only to execute specific Custom Commands, you need to remove all the other permissions from the role and then add the permissions for the commands. For information on how to grant permissions to execute Custom Commands, have a look at the following tutorial: https://www.adaxes.com/tutorials_DelegatingPermissions_GrantRightsToExecuteCustomCommands.htm.

For your information, Deny permissions always override the Allow ones. It means that if there is a role assigned to a user allowing them to perform a specific operation (e.g. execute a Custom Command) and another role denying the very same permission, the user will not be able to perform the operation.