Managing Sub-Administrators


Sub-administrators can manage user permissions by assigning roles, resource permission, and other aspects within the management scope assigned by the OU administrator. By designating sub-administrators and assigning management permissions to sub-administrators, OU administrator can increase the efficiency for managing the current OU.


This article introduces how OU administrators designate sub-administrators and manage the permission of sub-administrators.

Designating a Sub-Administrator


  1. Select Sub-Administrator from the left navigation pane of the Admin Console.

  2. Select Add Sub-Administrator.

  3. Enter the username to search for the user that you want to assign as a sub-administrator in the Select User > Sub-Administrator section.

  4. Select the scope of users and resources that the sub-administrator can manage in the Manageable Scope section. You can select one of the following scopes:

    • All: allow the sub-administrator to manage all applications, users, roles, organization structures, user groups, and resources in the current OU.
    • Specified Scope: allow the sub-administrator to Specified OU items. Select Add Assignment Method and the corresponding methods in the dropdown list, then specify the scope of users and resources that the sub-administrator can manage. A sub-administrator can manage the following items:
      • The resources of the organization structures specified in Assign by organization structures.
      • The user groups and the users in the user groups specified in Assign by user groups.
      • The roles and the users with the roles specified in Assign by roles.
      • The users, roles, and user groups created by the sub-administrator.
      • The resources that the sub-administrator can access.
      • All applications in the OU.

  5. In the Administrative Rights > Available Capabilities section, assign to sub-administrator the following permissions:

    Note

    To assign administrative rights is to assign the access permission of corresponding menus in Admin Console to sub-administrators. To allow sub-administrators to manage OU items such as users and resources, you need to make sure that these items are in the manageable scopes of sub-administrators, and the sub-administrators have the corresponding administrative rights, which means sub-administrators can access the corresponding menus in Admin Console.


    Administrative Rights Description
    Application Management Create and manage the menu groups of the applications in the OU.
    User Management Manage users, including creating users, editing user details, deleting users, batch exporting users, and assigning roles, groups, and organization structures for users.
    Role Management Manage roles, including creating roles, editing role details, and assigning menu groups, permissions, or organization structures to roles.
    User Group Management Manage user groups, including creating user groups, editing user group details, and viewing users in user groups.
    Organization Structure Management Manage organization structures, including creating organization structures, editing organization structure details, managing the nodes and resources of organization structures.
    Only available when the Manageable Scope of the sub-administrator is All.
    Asset Synchronization Synchronize assets and view synchronized assets.
    Only available when the Manageable Scope of the sub-administrator is All.
    Assign Asset Permissions Manage resource permissions of users or user groups.
    Resource List Manage resource, including viewing resource details and assigning resource permissions.
    Only available when the Manageable Scope of the sub-administrator is All.
    Audit Log Management View or export audit log records.
    Domain Configuration Manage OU domains, including creating domains and editing domain details.
    Only available when the Manageable Scope of the sub-administrator is All.


  6. Select Submit.

Configuring the Management Scope and Permission of Sub-Administrators


  1. Select Sub-Administrator from the left navigation pane of the Admin Console.
  2. In the sub-administrator list, select the Manage icon_manage of the target sub-administrator.
  3. Change the scope and permissions in sub-administrator detail page.
  4. Select Submit.

Removing Sub-Administrators


  1. Select Sub-Administrator from the left navigation pane of the Admin Console.
  2. In the sub-administrator list, select the Remove icon_remove of the target sub-administrator.
  3. Select Confirm on the popup window.