OAC Console Access - align to an application role that isn't Service Administrator

Rob Toogood

I have found that some of the functionality in OAC is linked to having Service Admin FDI privileges, which is not ideal in the production environment.

We wish to monitor query logs and content being created in production, but my organisation is risk adverse to allowing users Service Admin access in Production - due to the ability to either intentionally or unintentionally modify and change core config.

Can we change the application role to something like Functional Administrator or have a standalone application role which can be assigned to custom groups allowing them access to the OAC Console. Image below of the OAC console that I am referring to.