Restrict Specific AD Users from Logging into One Identity Manager

Based on the assumption that you use a role-based authentifier, all users can access Manager, Analyzer, and Launchpad via the Application Role Base roles\Everyone (Change). To be precise, the permission group VI_4_ALLUSER permits you via the assigned program function ApplicationStart_LaunchPad.

A solution would be to create a copy of the permission group, do not assign the program function, and assign the copy to the Application Role.

In addition, you need to ensure that the users who need to access Launchpad get the program function assigned via a different application role.

Thank you so much Markus.