I created subset of privileges to manage IPsec connections (new).
But these users can manage everything about phase1 and phase2 but they ca't apply whole configuration - error message is appearing.
Error reconfiguring IPsec
200
Group od subadmins have privileges - in attachment