Different User Views

[iboyd]

Can you set up a user "View" (I am a Cisco Network Tech by trade, on the routers and switches you can have "Views" which is a set of permissions for a user) that locks things down on the GUI of the 3300 so a Tier 1 tech can check things out without breaking it?

[ralph]

Yes.
You can set up different users with read/write permissions.
From the help files:

Creating System Administrator Policies

A System Administrator Policy controls access to forms in the System Administration Tool. When you create a policy, you set permissions that grant Read or Read/Write access to forms. You can also Deny access to forms, which hides them from the user.

Policies are assigned to users (one per user only) in the User Authorization Profiles form and distributed to all cluster elements by SDS.

There are three default policies— ROOT, SYSTEM, and REMOTE— each with different levels of access as described in the following table:

Ralph

[VinceWhirlwind]

I checked this out and discovered and was very impressed:
you create an Admin Policy, give it a name, then on a form-by-form basis (241 forms) decide which forms are available under that policy, and whether it is Read or Read/Write for each form.
Then you create a User Authorization Profile with System Admin set to True and give them the System Admin policy you created above.
 
Pretty good.