We have a debug group for ops personnel and one of the Access policies for that group is:

*/*/debug/packet-capture?Access=r+w+x

Ok, that works as expected, but I noticed that they cannot stop packet captures afterwards.  Does anyone know how to accomplish that in the access policy?

Thanks in advance,
Danny