Table API Read Only Access For Admins

[pheiss]

HI everyone,

I need to restrict the access for admins when they use the table API. It should be read-only! 

Is there a way to do and not to restrict every table in SN?

Would appreciate your help!

BR 

Patrick

[Ankur Bawiskar · Accepted solution]

@pheiss 

the only way is to control via table.None READ/CREATE/UPDATE/DELETE ACL

but you should ensure that the ACLs block admin as well.

if it has Admin overrides = true then it won't work

If my response helped please mark it correct and close the thread so that it benefits future readers.

[pheiss]

Sorry, mistakenly approved solution. Its working with policies, not with ACLs

[Luiz Lucena]

Hi @pheiss 

Would you be able to give more details how you achieve that?

And question to @Ankur Bawiskar , if we do with ACLs and those are editable by a security_admin role and that role is granted to an admin, then in theory that admin can modify the ACL and bypassing that rule, correct?

I'm questioning this because our auditing team came with some questions like that and if it would be possible to edit a role.

[Ankur Bawiskar]

@Luiz Lucena 

that's correct

any admin if given security_admin role can modify any ACL in platform