In global configuration set the permission for that group to denied for "access administration interface" and then set it to be allowed per component. That is what the default manager group does

In global configuration set the permission for that group to denied for "access administration interface" and then set it to be allowed per component. That is what the default manager group does

This rule denies access to the administrator panel as it is described, and a user will get empty dashboard while we need the user to have limited access to some sections like components.
And this is already configured - the user gets access to specific sections of the site.
All what is needed is to hide System link for such user group because of this section is empty (for this user group).

and then set it to be allowed per component. That is what the default manager group does

@Sulpher what @brianteeman is trying to tell you is that you should set Access Administration Interface to Denied and than set your created group permissions for that soecific component.

Closing due to no response that you have your answer.

I am sorry this subject was kept non-answered for a long period of time.
Well, I returned back to this task and still cannot resolve it.

Let me explain what I need.

I need to allow access to specific components only and do not display System menu item.

What I do:

1. Go to System > Global Settings > Options. Choose the the right user group and set Access Administration Interface to Not Allowed:

Then I go to any component, let it be Banners and set Access Administration Interface to **Allowed:. but the parameter from Global Options has higher priority and overrides the value in component settings:

As the result, the user do not have access to components at all:

Well, it is logically. But I have no idea how to disable access to System in such a way.

I will be thankful for any advice. Thanks.