Starter sample script

if(!context.onPrem){

      trace("Not onprem");

		var umod = module('User');

		var user = umod.GetCurrentUser();

      if(user.InRole("sysadmin")){

          trace("Allow sysadmin");

		policy.RequiredLevel = 2;

      } else {

       trace("Block non-sysadmin");

          policy.Locked = true;

   }

}