{kb-symptom}
Sub-users are able to create Policies for Agents they are not assigned to.
(DCC is set to multi-tenant mode.)
1. Log on to the DCC console as the sub-user.
2. Go to the "Policies" menu and create a new Policy.
3. Select the CDP server for the Agent with the sub-user's permission.
4. Expand the list to select the Agent.
5. Only the Agents assigned to this user must appear in the list.
{kb-resolution}
The issue has been corrected in DCC 4.2.0. Sub-users created on DCC can now create Policies only for Agents they are assigned to.
{kb-related-articles}
Sub-users are able to create Policies for Agents they are not assigned to.
(DCC is set to multi-tenant mode.)
1. Log on to the DCC console as the sub-user.
2. Go to the "Policies" menu and create a new Policy.
3. Select the CDP server for the Agent with the sub-user's permission.
4. Expand the list to select the Agent.
5. Only the Agents assigned to this user must appear in the list.
{kb-resolution}
The issue has been corrected in DCC 4.2.0. Sub-users created on DCC can now create Policies only for Agents they are assigned to.
{kb-related-articles}