Catalog item restrictions let you limit which Policies can access specific items in your Catalog. This is useful in multi-tenant or multi-team environments where certain software or device settings should only be available to specific parts of your organization.
How It Works
When a catalog item is restricted to one or more Policies, visibility works as follows:
- Users with Policy restrictions can only see unrestricted items, or items restricted to the same Policies they have access to.
- Users with an Owner role can see all catalog items regardless of restrictions.
- If a Policy is granted access to a restricted item, all of that Policy's child Policies also inherit access.
Note: Only users with an Owner role can configure catalog item restrictions.
Supported Catalog Items
Restrictions can be applied to the following catalog item types:
- Device Settings
- Smart Software
- Monitoring
- Maintenance
- Self Service Configurations
How to Restrict a Catalog Item to Specific Policies
- Navigate to Catalog and select the tab for the item type you want to restrict (for example, Smart Software).
Click the ... menu next to the item and select Restrictions...
- In the Restrictions panel, check Restrict this item to only these policies.
- Select all Policies that should have access to this item.
- Save your changes.
Note: If the item is currently assigned to any Policy, you must remove it from those Policies before you can restrict it. The Restrictions panel will indicate which Policies are currently using the item.