Since upgrading to NCM 7, there is a lot tighter integration of NCM with the WI - which I love! The downside however is that we have staff in certain roles who we don't want to have any access at all to the configuration management side of orion - not even view access. These are the roles available to us:
Administrator Unlimited access to NCM functionality.
Engineer Admin but can not view config transfer status from all users.
WebUploader Read/Write but requires approval from an Admin. No access is granted to the desktop NCM application.
WebDownloader Read only access with ability to download configs. No access is granted to the desktop NCM application.
WebViewer Read only access. No access is granted to the desktop NCM application.
I'd like to see an additional 'No access' role to prevent certain users from viewing any configs. The configuration tab was removed from this profile, but now with NCM integrated into node screens etc. we'd need to copy and manually remove those portions from all the different pages where configs now appear.