If you navigate to System UI - UI actions and search for "delete asset only" you will find that this UI action is displayed to users with the role 'asset'. You can disable/deactivate this UI action or change the display conditions - e.g. set "admin" role insted of asset or whatever is usefull in your case.
Hi. There is an ACL which is giving rights to delete records from the cmdb_ci table if the user has role asset or itil. You can deactivate this ACL, create a new one which must be the same, with the only difference in the roles - add 'admin' instead of 'asset' and 'itil'.
Please mark as Correct if this helps you find the solution you need. Thanks.
Thank you Martin for the advice. I did what you suggested and also made the same changes to alm_asset and now regular asset users cannot see the delete button in the form and cannot delete CIs. However, they still can use the "Delete asset only" button found on the asset form. I have not yet figured out why this is the case and how would I disable that.
I marked your answer Helpful, did not mark it as correct answer since they still can delete assets. But definitely a step towards the right direction!
If you navigate to System UI - UI actions and search for "delete asset only" you will find that this UI action is displayed to users with the role 'asset'. You can disable/deactivate this UI action or change the display conditions - e.g. set "admin" role insted of asset or whatever is usefull in your case.
