Hello again, so I having a bit of trouble with setting a correct role and define the correct policies for some users. In my case, I have a user, let's call him user A. This user A initially has the reader role (which only lets him see the datasets and the glossary; he isn't allowed to see the ingestion, users&groups and permissions tabs). Later on I created some policies (with the root user as with the user A I didn't have enough privileges) over a domain to check if I was able to restrict the people that would be able to see it. After creating the policies, I logged in again with the user A. To my surprise, I was able to see the ingestion, users&groups and permissions tabs which I wasn't able to see when the role changes took effect. Can anyone explain why this strange behaviour might be happening??

Without seeing exactly what the policies were created by the root user & the changes made to the default policy I would guess the issue was around the latter.

If I recall correctly, the changes where basically erasing the "General Personal Access Token" and "Manage Users & Groups".