RBAC permissions on FMC

[atsukane]

Hi all,

I've noticed that even if I don't grant Modify Devices permissions under Device Management, anyone with that role assigned can suspend HA. Initially I thought this is just cosmetic and doesn't actually suspend HA, but it allows you to suspend HA. 

Not sure if this is version related bug? Ours is 7.4.2.1.

While on RBAC permissions, it would be great if "Find Usage" option can be made available for read-only permissions. This feature currently requires Modify permissions that allows users to edit/add/delete objects. 

Thanks,

[balaji.bandi]

may be worth Open a TAC case to troubleshoot is this expected behavior or wish list ?

[atsukane]

thanks, will do and come back with their response.