If you want to remove the permission partially, you can remove their access to Manage>Filters.
In this case, users have access to Manage>Computers >Filters section in the left pane and can use the filters and edit them by adding and removing criteria, but they cannot change the query or filter definition; to do so:
- Go to Settings>All settings>Notification Server>Account Management>Account and choose the account you want to change
- Preferably right-click on the account and clone it, then make the changes on the cloned account, and add your user to the new cloned one instead of changing the built-in accounts.
- Click on 'Show Security Role Manager' below in the right pane
- Make sure the Role on top is the correct one, then change the View to Console Menu
- Under Manage>Filters, remove the 'Read' permission
To remove the edit/write permission completely:
- Go to Settings>All settings>Notification Server>Account Management>Account or role and choose the User or Role, right pane Privileges' tab under management console and you will see 'Create Filter'. Uncheck this.
Also:
- Go to Settings>All settings>Notification Server>Account Management>Account or Role, and then select Roles>Privileges>Show Security Role Manager (Below the page).
- Choose the desired Role on top of the page
- Click on the glasses icon
- Change the view to 'Filters', or 'All Items>Resource Management> Filters (This will show more details)'.
- Here you can remove the 'Write' permission