We need data managers that don't have cmdb admin role.
We have a team that manages data certification but now that it's being moved into the CMDB workspace you need the cmdb admin role to manage data certification and attestation (which I feel is absurd). Would we need to create custom ACLs to make this...
