Creating a Security Administrator

In a large marketing organization, maintaining system security can be time consuming. You might have a high volume of these requests:

Creating user records.
Inactivating or deleting user records for individuals who no longer need access.
Changing rights for current users.
Resetting expired or forgotten passwords.

Having a security administrator can reduce the volume of requests handled by the system administrator.

If necessary, create a user record.
Navigate to the user record.
Click the Domain Rights tab.
From the Available Rights list, move Security Administration to the Select Rights list.
Click Save.

Security Administrator Rights

Some security administration rights are default rights and are always retained by the security administrator. The system administrator can also assign the rights a security administrator can control.

Default Rights

By default, a security administrator can perform these functions:

Access the Users module in System Tools
Access the Groups module in System Tools
Access to the Offices module in System Tools
Access to the Portal Approvals module in System Tools
Access the Roles module in System Tools
Add, edit, and delete user records
Add, edit, and delete group records
Add, edit, and delete role records
Add, edit, and delete office records
Approve or reject requests for portal access

Assigned Rights

The Security Admin Functions system parameter controls the rights a security administrator can assign.

Caution:

The security administrator can assign rights to himself or herself. Carefully consider the rights a security administrator can control. For example, because financial data is often confidential, you might want to control financial data rights more closely.

When a security administrator adds or edits a user or group, the Available Rights list displays only those rights the security administrator can assign. If the user or group already has a right the security administrator is not allowed to control, the security administrator cannot remove it from the Selected Rights list.