[Freeipa-users] Disable anonymous access to ldap

Is it possible to disable anonymous read access to ldap? When I try to delete permission related to this, I got an error that this is a managed permission and cannot be deleted. Command: ipa permission-del "System: Read Global Configuration" Result: ipa: ERROR: Insufficient access: cannot delete managed permissions Is there any functionality that may be broken by this?