Creating and Managing Users
By default, only an Administrator can perform the tasks described in the following topics. An Administrator can enable other users to perform these tasks by giving them specific system security roles.
In this topic:
Requirements
To let non-Administrators create and manage users and groups, grant them the required security roles. This involves assigning the group to which non- Administrator belongs, to the required roles.
-
Click System > Security > System Security Roles.
-
Click Edit by these roles to assign the group in which the user is a member:
-
ManageSystemSecurityUsers: Assignees can create, modify and mange users.
-
ManageSystemSecurityGroups: Assignees can define, modify and mange groups.
-
ManageSystemSecurityRoles: Assignees can manage roles to provide group-based, functionally-tailored access to artifacts and tools.
-
To revoke the ability to manage users, groups and roles, remove assignees from the relevant role. See Manage System Security.
Tips and Best Practices
-
The Administrator is assigned to all system security roles (roles) so can always manage application and system-wide users, groups, artifacts, data, and tools. Removing or reassigning the Administrator group or assigning other users and groups to roles does not revoke the Administrator's access.
-
The Administrator cannot be disabled and is unaffected by inactivity thresholds that disable users who try to log in after a specific period of time elapses.