<?xml version="1.0" encoding="UTF-8"?>
<!--
  ~ Copyright (c) 2016, WSO2 Inc. (http://www.wso2.org) All Rights Reserved.
  ~
  ~ Licensed under the Apache License, Version 2.0 (the "License");
  ~ you may not use this file except in compliance with the License.
  ~ You may obtain a copy of the License at
  ~
  ~     http://www.apache.org/licenses/LICENSE-2.0
  ~
  ~ Unless required by applicable law or agreed to in writing, software
  ~ distributed under the License is distributed on an "AS IS" BASIS,
  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  ~ See the License for the specific language governing permissions and
  ~ limitations under the License.
  -->
<serviceGroup>

    <service name="IdentityGovernanceAdminService" scope="transportsession">
        <transports>
            <transport>https</transport>
        </transports>
        <parameter name="ServiceClass" locked="true">
            org.wso2.carbon.identity.governance.IdentityGovernanceAdminService
        </parameter>
        <operation name="getConnectorList">
            <parameter name="AuthorizationAction" locked="true">/permission/admin/manage</parameter>
        </operation>
        <operation name="updateConfigurations">
            <parameter name="AuthorizationAction" locked="true">/permission/admin/manage</parameter>
        </operation>
        <parameter name="adminService" locked="true">true</parameter>
        <parameter name="hiddenService" locked="true">true</parameter>
   </service>

</serviceGroup>

<?xml version="1.0" encoding="UTF-8"?>
<!--
  ~ Copyright (c) 2016, WSO2 Inc. (http://www.wso2.org) All Rights Reserved.
  ~
  ~ Licensed under the Apache License, Version 2.0 (the "License");
  ~ you may not use this file except in compliance with the License.
  ~ You may obtain a copy of the License at
  ~
  ~     http://www.apache.org/licenses/LICENSE-2.0
  ~
  ~ Unless required by applicable law or agreed to in writing, software
  ~ distributed under the License is distributed on an "AS IS" BASIS,
  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  ~ See the License for the specific language governing permissions and
  ~ limitations under the License.
  -->
<serviceGroup>

    <service name="IdentityGovernanceAdminService" scope="transportsession">
        <transports>
            <transport>https</transport>
        </transports>
        <parameter name="ServiceClass" locked="true">
            org.wso2.carbon.identity.governance.IdentityGovernanceAdminService
        </parameter>
        <operation name="getConnectorList">
            <parameter name="AuthorizationAction" locked="true">/permission/admin/manage/identity/governance/view
            </parameter>
        </operation>
        <operation name="updateConfigurations">
            <parameter name="AuthorizationAction" locked="true">/permission/admin/manage/identity/governance/update
            </parameter>
        </operation>
        <parameter name="adminService" locked="true">true</parameter>
        <parameter name="hiddenService" locked="true">true</parameter>
   </service>

</serviceGroup>

Add a fine grained permission for IdentityGovernanceAdminService
Add a fine grained permission for IdentityGovernanceAdminService
