// Module included in the following assemblies:
//
// * builds/securing-builds-by-strategy.adoc


:_mod-docs-content-type: PROCEDURE
[id="builds-disabling-build-strategy-globally_{context}"]
= Disabling access to a build strategy globally

To prevent access to a particular build strategy globally, log in as a user with cluster administrator privileges, remove the corresponding role from the `system:authenticated` group, and apply the annotation `rbac.authorization.kubernetes.io/autoupdate: "false"` to protect them from changes between the API restarts. The following example shows disabling the docker build strategy.

.Procedure

. Apply the `rbac.authorization.kubernetes.io/autoupdate` annotation by entering the following command:
+
[source,terminal]
----
$ oc annotate clusterrolebinding.rbac system:build-strategy-docker-binding 'rbac.authorization.kubernetes.io/autoupdate=false' --overwrite
----

. Remove the role by entering the following command:
+
[source,terminal]
----
$ oc adm policy remove-cluster-role-from-group system:build-strategy-docker system:authenticated
----

. Ensure the build strategy subresources are also removed from the `admin` and `edit` user roles:
+
[source,terminal]
----
$ oc get clusterrole admin -o yaml | grep "builds/docker"
----
+
[source,terminal]
----
$ oc get clusterrole edit -o yaml | grep "builds/docker"
----
