How to restrict users from publishing directly from Studio to Orchestrator?
The permissions to Packages on the Role assigned to the user / group should be modified to view only permission.
- Go to the Orchestrator
- Go to Users( Manage Access) -> Roles
- Edit Role assigned to the User / Group
- Remove "Create" access for Packages.
Refer Tenant - Managing Roles to Edit
Note that after this change the specific user / group will no longer be able to publish any package directly to the same Orchestrator from Studio.
In order to publish packages to the Orchestrator post the above changes, users need to publish the package locally and then the users with Packages Create Permission should manually upload the package to the Orchestrator (Refer - Manually Uploading Packages to Orchestrator) .