The reprovisioning of machines is causing security alarms in AD, so I wanted to disable the functionality.
Tried disabling it on the blueprint's security section > Machine Operations.
New machines based on the reconfigured blueprints are still providing the option to Reprovision for managers (not regular users) .
Why should managers be allowed to trigger functionality which is disabled on the blueprint?
How do I work around this?