Product Documentation

Administrators

Apr 15, 2013

When you create a Site as a local administrator, your user account automatically becomes a Full Administrator with full permissions over all objects. After a Site is created, local administrators have no special privileges.

By default, an administrator is enabled. You can disable an administrator, if needed. This might be necessary if you are configuring a new administrator now, but that person will not be beginning administration duties until some time in the future. For existing enabled administrators, you might want to disable several of them while you are reorganizing your object/scopes, then re-enable them when you are ready to go live with the updated configuration.

Important: To prevent the system from becoming unusable or unmanageable, there must always be at least one Full Administrator; therefore, you cannot disable or delete that administrator.

You can produce a printable HTML report listing all the roles, scopes, and permissions an administrator has.

To create an administrator

The Full Administrator role always has the All scope; you cannot change this.

  1. In Studio, click Configuration > Administrators in the left pane, then click the Administrators tab in the middle pane. A list of existing administrators appears.
  2. In the Actions pane, click Create new Administrator.
  3. Type the name of the administrator user account or browse to it.
  4. To specify the objects the administrator can access, select a scope. You can select an existing scope or create a new one (see To create a scope).
  5. To define the permissions the administrator has for the scoped objects, select a role.
  6. A summary of the new administrator's details appears. By default, a new administrator is enabled. To disable the new administrator, clear the Enable Administrator checkbox.

    To create a report listing all the permissions the administrator will have, click Create a full permissions report for this Administrator (HTML format).

  7. To create the administrator, click Finish.

To copy an administrator

You can create an administrator by copying the details of an existing administrator. Unless you change them, the new administrator will have the same role/scope pairs as the copied administrator.

  1. In Studio, click Configuration > Administrators in the left pane, then click Administrators tab in the middle pane. A list of existing administrators appears.
  2. In the middle pane, select the administrator you want to copy, then click Copy Administrator in the Actions pane. The role/scope pairs for the administrator you are copying appear.
  3. Type the name of the new administrator's user account or browse to it.
  4. You can edit or delete any of the role/scope pairs, and you can add new ones. By default the new administrator will be enabled. To disable the new administrator, clear Enable Administrator.

    To create a report listing all the permissions the new administrator will have, click View full permissions report.

  5. To create the new administrator, click Save.

To edit an administrator

  1. In Studio, click Configuration > Administrators in the left pane, then click the Administrators tab in the middle pane. A list of existing administrators appears.
  2. In the middle pane, select the administrator you want to edit, then click Edit Administrator in the Actions pane. The details of that administrator appear. You can update them as follows:
    • To add a role/scope pair, click Add. You are led through the steps for adding scopes and roles in the same way as when you create a new administrator.
    • To edit a role/scope pair, click the row containing the pair you want to edit, then click Edit. A list of scopes appears; the scope currently paired with the role is selected. You can either change the objects for which the administrator has permissions by selecting a different scope, or you can change the permissions that the administrator has for the objects by selecting a different role:
      • To select a different scope, click it, then click Save.
      • To create a new scope, click Create new Scope (see To create a scope).
      • To select a different role, click Role in the left pane. A list of roles appears; the role currently paired with the scope is selected. Click the new role, then click Save.
      • To create a new role, click Create new Role (see To create a role).
      • To delete a role/scope pair, click the row containing the pair you want to delete, then click Delete. This deletes only the relationship between the role and the scope for this administrator; it does not delete either the role or the scope, nor does it affect any other administrator who might also be configured with this role/scope pair.
    • To enable or disable the administrator, select or clear Enable Administrator. You cannot disable the administrator if it would result in there being no enabled Full Administrator.

To delete an administrator

You cannot delete an administrator if it would result in there being no Full Administrator.

  1. In Studio, click Configuration > Administrators in the left pane. A list of existing administrators appears.
  2. In the middle pane, select the administrator you want to delete, then click Delete Administrator. The scopes and roles associated with this administrator are displayed, so that you can check the impact of the deletion before confirming it.

To create a resultant set of permissions (RSOP) report

You can produce and save a printable HTML report listing all the permissions an administrator has. The report shows the role/scope pairs associated with the administrator, then lists the individual permissions for each type of object (for example delivery groups and machine catalogs).

  1. In Studio, click Configuration > Administrators in the left pane. A list of existing administrators appears.
  2. In the middle pane, select the administrator, then click Create RSOP Report.

You can also create a report when creating, copying, or editing an administrator.