Granular Access to edit security groups only?

[KKSAdmin]

Is there a way to provide admins with the ability to edit security group membership but NOT to allow firewall edits? Thanks!

[bayupw · Accepted solution]

The current available built in roles (including the latest NSX 6.4.2), roles that has Read/Write permission to security groups and tagging would also have Read/Write permission to Firewall Config.

If you need more specific fine grained granular permissions, you may want to explore third party solution such as HyTrust or ReSTNSX