Any way to remove the config/commit lock button in a custom admin role?

[jsalmans]

Hi all,

I'm wanting to set up a "Monitoring and Reporting" only role on Panorama.  I've gone throughe and disabled commit/validate as well as all of the tabs except Dashboard, ACC, and Monitor.

The thing is I've noticed the commit/config lock button is still present and clickable.  Is there any way to remove this on accounts I want to be read-only and limited which shouldn't need the ability to do a lock?

Thanks!

[BPry]

What PANos are you running; I don't believe my monitoring users can see these icons at all. 

[jsalmans]

Hi BPry,

I'm on 7.1.8 currently,  The Commit link itself is removed after I told the role I didn't want it to be able to commit or validate but the little lock icon is still there.

I figured I missed something in the role but I don't see anything else to remove or put at read only... the only stuff left I believe are the Dashboard, ACC, and Monitoring tabls along with their sub-items.

Thanks,

Jason Salmans