We are using IdentityIQ 8.5P1. Please let me know how to Hide Notification Settings under Configure IdentityIQ Settings for all and limiting access to only few people. Basically, we do not want tech team to update “Email Notification Type”.
Thanks.
Hi @amandeeparneja,
Unfortunately I don’t think there is an out-of-the-box way to do this… Access to the IdentityIQ Configuration page is controlled by the FullAccessSystemConfig SPRight, which grants view and edit on all tabs at once, including Notification Settings. As long as your tech team has this right, they will be able to change the Email Notification Type.
What you can do is track changes by enabling some audit on updates.
But as workarounds, I think you could also check this 2 options
- Run Rule task: schedule a rule that checks the Email Notification Type in the SystemConfiguration object and, if it differs from the expected value, resets it and sends an alert to your admins.
- UI plugin: create a small plugin with a JS snippet targeting the IdentityIQ Configuration page to hide or disable the field, tied to a custom SPRight given only to the tech team. Keep in mind this is a UI guardrail only, it won’t block changes made through the Debug pages or an XML import.
Don’t know if it could works but let’s me know. 
Hello Amandeep. @sbisson has covered the options well. A UI plugin can hide Notification Settings, but it does not prevent changes through other methods.
The FullAccessSystemConfig right controls the entire IdentityIQ Configuration page, so there is no separate OOTB permission for this setting.
If your team still needs access to the other tabs, I would suggest Sébastien’s scheduled rule approach to detect and revert unwanted changes in SystemConfiguration, along with auditing to help track modifications.
Just keep in mind that this is a corrective measure, not a way to prevent changes.