Locking Resources With Other Roles than Administrator

Ignition has this nice feature to lock resources, we are hoping to use this to lock the customer out of some things we would consider our company’s IP. I know you can give special permissions to allow only certain roles to lock/unlock resources.

We want to be able to give the customer a User with an Administrator role but we don’t want them to be able to unlock our resources. I understand if you don’t have permission to unlock/lock resources you can’t change the permissions but if you have a User with an Administrator role, couldn’t they just create new User with the role that is required to unlock/lock resources.

How can you truly lock resources from an Administrator?

There’s not really any way to achieve this.

Discussed elsewhere: