Allow per-agent edit/delete of checks inherited from non-enforced policies

[UniComm-Solutions]

I’d like to edit or exclude individual policy-inherited checks at the agent level when the source policy is not enforced.

Currently, Edit and Delete are disabled for policy-managed checks regardless of the Enforced setting. I frequently have endpoints where the standard policy is correct except for one or two checks. Creating separate policies for these exceptions adds unnecessary overhead.

Requested behavior:

• Enforced policy: Keep Edit/Delete disabled for inherited checks.
• Non-enforced policy: Allow editing and/or deleting an inherited check to create an agent-specific override without changing the source policy or other agents.
• Preserve these overrides and exclusions when policies refresh.

For example, an endpoint should retain the standard Windows Desktop policy while allowing a different disk-space threshold or excluding a service check that does not apply to that machine.

[silversword411]

Already an issue on this