Data Dependent Authorization in Integration Directory

[Former Member]

Hi all,

I faced a couple of questions regarding Data Dependent Authorization in Integration Directory:

1) I've configured user role in Integration Directory to restrict access to certain services and communication channels.

When I configure it as follows:

Selection Paths:
   Operator: Include
   Party: -
   Service: ZMDMBS
Objects:
   Operator: Include
   Types: *
   Actions: Full Edit

I get expected behaviour: user assigned to this role can modify ZMDMBS and can't modify any other Service in ID.

And when I change <i>Selection Paths -> Operator:</i> to <b>Exclude</b> I expect that all services will be modifiable except ZMDMBS. But in this case no of the services is modifiable.

Is my configuration of the authorization wrong ?

2) Is it possible to restrict access to all configuration objects relevant to specific Scenario ?

[prabhu_s2 · Accepted solution]

<b>2) Is it possible to restrict access to all configuration objects relevant to specific Scenario ?</b>

i dont think so it is possible. But u can lock the object so that other users cannot modify it.