When using namespaces and RA Administrator roles administrating RA users, administrators have privileges which are not included in a peer connector per default. Neither can these settings be configured in the peer connector per default so it has to be done in the advanced access rules.
To be able to ease the configuration of the peer tunnel for external RAs used by RA administrators there should be a check box under Peer Systems / Authorized requests / RA rules named something like Administration management (c.f. Approval management), controlling the following advanced access rules:
With this check box, configuring peer tunnel permissions in advanced mode is avoided.