Product Documentation

How to assign additional permissions to delegated admin users

When the first user of your organization signs up and logs on to Citrix Application Delivery Management (Citrix ADM), this user is assigned the super admin privileges. Every subsequent user that logs on is assigned a delegated admin role by default. A delegated admin does not have the permission to view and perform any tasks related to user administration or RBAC settings.

However, you can assign super admin privileges or specific non-super admin roles to a delegated admin so that he is able to perform tasks related to user administration.

For detailed information about role-based access control see Configuring Role-Based Access Control.

Assigning Super Admin Permissions to a Delegated Admin

To assign super admin permissions to a delegated admin, a super admin has to assign the default admin group to a delegated admin user. Perform the following tasks:

  1. Log on to Citrix ADM as the super admin.
  2. Navigate to Account > User Administration > Users.
  3. Select the user name of the delegated admin and click Edit.
  4. Assign the group <tenant_name>_admin_group to the delegated admin and click OK. For example, in the below image, “example_admin_group” is assigned to a delegated admin user.

    localized image

Assigning Custom Role to a Delegated Admin

To assign any custom role to a delegated admin, the super admin has to create a new group, role, and policy and assign to the delegated admin user. This ensures that the delegated admin has only the required permissions. Perform the following tasks:

  1. Log on to Citrix ADM as the super admin.
  2. Navigate to Account > User Administration > Access Policies. Select Add to create an access policy with the required permissions for the delegated admin. In this example, an access policy “custompolicy” is created that allows view access to User Administration settings.

    localized image

  3. Navigate to Account > User Administration > Roles. Select Add to create a role and bind this role to the access policy that you created in the previous step. In this example, a role “customrole” is created and bound to the “custompolicy” access policy.

    localized image

  4. Navigate to Account > User Administration > Groups. Select Add to create a group and bind this group to the role you created in the previous step. In this example, the group “customgroup” is created and bound to the role “custom role.”

    localized image

  5. Navigate to Account > User Administration > Users

  6. Select the user name of the delegated admin and click Edit.

  7. Assign the group you created in the previous step to the delegated admin user. In this example, the delegated admin user is assigned the group “customgroup.”

    localized image

How to assign additional permissions to delegated admin users