Unable to create a helpdesk policy

1

I want to create a policy that allows helpdesk staff to enrol users for HOTP.

I don’t want helpdesk staff logging in as superuser

Every time I create a policy and use the helpdesk template it restricts my superuser login and I need to use the CLI to delete the policy to get superuser access again

image
image1801×845 72.1 KB

2

You say you hav a “superuser”. What makes this user a superuser?
Is there any policy that tells privacyIDEA, that this user you are talking about has the rights that make him a superuser?

Think about it and read the two notes here: