Skip to main content
Question

Permission missing to change security settings on a new created plan

  • July 7, 2026
  • 2 replies
  • 23 views

Forum|alt.badge.img+12

Hi,
what is the best way to achieve, that a (restricted) user, who created a derived plan, gets the permission to change security settings of his new created plan ?

I’d like/need to share the plan with all members of a specific user/secrity group.
The plan should be accessible by all members of that group

the system created Role: Plan Creator is automatically assigned, but this does not include the change security settings permissions and cannot be altered, since system created.

(CommCell is running on CV11.40)

rgds
Klaus

2 replies

Forum|alt.badge.img+17
  • Vaulter
  • July 9, 2026

Hi ​@johanningk ,

You can create a custom role that includes "Change security settings" and assign it to the user or user group, but this will allow users to change security on all plans they have access to, not just the ones they create.

As of now I could not find way to automatically assign "Change security settings" only on plans created by a user, nor to modify the system "Plan Creator" role.


Forum|alt.badge.img+12
  • Author
  • Explorer
  • July 9, 2026

Hi Pradeep,

the abillity to change permissions on any plan, the user has access to is not really a problem in this environment.

Even though I use base plans, where the user should only have view priviledges and other pre-deployed plans, where he should only have the plan subcription permission.

Is there another option to reject/revoke permissions granted on a higher level ?
this would solve the issue with the permissions 

Other Option can be to also grant the plan creator role the right to change permissions on his own plans.
This would exactly meet the requirements


Btw. to achieve the desired permissions I had to create a new role, that grants change permissions on all plans and a further role, that grants use and edit permissions on all plans, which is visible to all and can be assigned to the user group, that should be entiteled by the plan creator.

Thanks
Klaus