Grant public template permission to domain admin and normal user policy.