Create a role block
We can remove inherited role assignments by creating a role block. Inserting a role block affects all users and groups who do not have explicitly assigned roles on a resource. We can create a propagation block for a resource so that children of the resource will not inherit any assignments for the role type, and we can create an inheritance block so that a resource will no longer inherit any assignments for the role type from the parent resource. To create a role block:
- On the initial Resource Permissions screen, click the appropriate Resource Type. If necessary, search for a specific resource instance.
- Click the Assign Access icon of required resource type.
- Remove the check mark from the Allow Propagation check box to create a propagation block. Children of the resource will no longer inherit any assignments for this role type.
- Remove the check mark from the Allow Inheritance check box to create an inheritance block. This resource will no longer inherit any assignments for this role type from the parent resource.
- Click OK to save changes.