When strictly enforcing views and user group assignments, an operator will be enabled to work on the assigned events including tool execution, e.g. on application events. It is very helpful being able to see also unassigned events on Cis in the neighborhood, e.g. infrastructure events.
Depending on the views, it happens that operators can execute tools also on unassigned events which is problematic. Ci types and tool categories do not offer fine grained permission control in this use case.
The request is to restrict tool execution on unassigned events.
Ideally, tools do not show up on unassigned events.
This could be added to the permissions of Operations Console > Events similar to the column "Launch actions".