I'm looking for some help on managing user roles and permissions in PAM. Below is the description of how I would like to set this up. Let me know if you have any experience configuring EEM like this or if you have some better strategy to manage access.
Different IT teams get their own folder in PAM. Each team should only be able to see their own folder but no folders from other teams. Within each team there may be two groups. One group of designers who should have full control over all the objects within their folder. And another group of basic users who should only be able to run a process either directly or from a start request form.