We found that some  users with NFA product priviledge "user" can access the NFA Administration page .
New "user" logins have not this access .

if 1 user had access to the administration at 1 time , having the right permissions ,
it keep this access until an IIS recycle ( cache used) .even if we deleted the
permissions

 

Release:
Component: NQRPTA

start "IISRESET" in a dos box on the NFA console and relogin the user