Read Only Access to JobQueue

I would suggest checking out the following post, it talks about the permissions series of videos on the One Identity Offical Youtube Channel, this should help you figure out how to implement this.

www.oneidentity.com/.../is-there-a-way-to-limit-access-to-designer-synceditor-to-read-only-for-system-accounts

This one as well: https://support.oneidentity.com/identity-manager/kb/176967/how-to-assign-a-permissions-group-to-a-task

Hi Trevor & Troy,

Thank you ! It worked..

However user have access to re-enable/restart the frozen jobs, is there a way we can disable this ?

Let me look into this...

A limited way of doing it, is to just give the program function "ApplicationStart_JobQueueInfo" to your user (group) in addition to the group memberships for "QBM_BaseRight"

Some "right-click" monitor functions are not available but the JobQueueInfo works.

Thanks Markus, I was just about to reply with this information.

Hi Markus & Trevor,

We tried this but user still have option to re-enable/restart/end with error/end with success the frozen jobs.

Thanks

Are you sure that your user does not have the program function "JobQueue_Monitor" assigned?

Hi Markus,

Yes, user does not have the program function "JobQueue_Monitor" assigned.

We have also contacted support regarding the same and it seems they also have option to re-enable/restart/end with error/end with success the frozen jobs.

Thanks 

Did you open a new service request for this?  If only "ApplicationStart_JobQueueInfo" is assigned, you shouldn't have those options available.