Restricting Admin Access to a Specific Folder for an Operator

[AnkitaRa2]

Hi Team,

We have an operator with admin access, but we would like to restrict their permissions so that they can only edit or delete items within a specific folder (used for testing). The operator should not be able to edit or delete content in any other folders within the instance.

I’ve attempted to limit access at the folder level, but since the operator has admin rights, they are still able to edit and delete activities across all folders.

Is there a way to configure permissions so that admin-level access is limited to only a specific folder? Any guidance or suggestions on how to achieve this would be greatly appreciated.

Thank you!

Regards,
Ankita Vishe

[ParthaSarathy]

Hi @AnkitaRa2 ,

You can achieve this in a different way: Instead of providing 'admin' access, you can assign any other operator group to that operator and provide read only access to all other admin folders like data schema, administration folder etc., So that this operator can read-only all the folders and data what a actual admin operator can view but can't edit or delete it.

[SushantTrimukheD · Accepted solution]

Hi @AnkitaRa2,

I believe the only viable solution is to remove the operator's ADMINISTRATION rights, then create a custom operator group (e.g., 'TestFolderAdmins') with specifically defined rights such as WORKFLOW, EXPORT, and DELETE FOLDER. After that, assign Read, Write, and Delete permissions to the testing folder for this group, while ensuring no permissions are granted for other folders.

Thanks

Sushant Trimukhe

[AnkitaRa2]

So just to confirm—there’s no other way to achieve this while retaining admin rights? It’s not possible to restrict access with admin privileges in place, correct?

Thanks & regards,
Ankita vishe

[SushantTrimukheD]

@AnkitaRa2As far as I know, this wouldn't be possible while retaining admin rights.

[AnkitaRa2]

Is it possible to create custom Named Rights? I’d like to set up an "Admin - Read Only" group. The purpose is to provide read-only access to certain administrative folders, mainly for validation and cross-checking purposes.