Endpoint Protection

Hi team, Please help,

How to provide read only access for SEPM policies to the  SEPM ID

Create a Limited Adminstrator and set the option to not allow editing of shared policies. Keep in mind this still allows for them to create non-shared policies.

Thank you, do we need to give access to manage groups also as read only, do we need to check or uncheck on Do not allow editing of shared policy option for read only access. ID that need to view only policy required

While Searching I saw as attached, please suggest.

select the read-only option on the group.

Yes, exactly!

As Brian said, you will have to CHECK the boxes "Manage Policies" and "Do not allow editing of shared policies.

However, the permission level that you set under "Manage Groups" will allow the Administrator to do the following.

Full access:
Cannot edit shared policies that are in the group.
Can convert the shared policies in the group to Non-Shared policies.
Can edit already existing Non-Shared policies in the group.
Can delete clients in the group.

Read only access:
Can view the policies in the group.
Cannot edit policies in the group (both Shared and Non-Shared).
Cannot delete clients in the group.

Thanks for the support,