Expand my Community achievements bar.

Join us for our next community Coffee Break on February 28th! Four of our Analytics Champions will be joining us to discuss Summit tips, best practices, and any of your Analytics questions!

User group admins should be able to add new users

Avatar

Level 2

7/5/23

Description

 

In our Adobe instance we have several systems connected to Adobe and each is represented as virtual report suite.

We are using product profiles to set permissions for individual virtual report suites and user groups to share the project dashboards with the user groups.

 

We want to roll out a delegated user management concept, so that for each application a specific user should be responsible to give other users access to the statistics of their application. This specific user is a user group admin and can add or remove other users.

 

Unfortunately, it is only possible to add a user if the user has been added to another user group before / added to the organization. We have been informed that the responsible user must be an admin in the product profile to add new users to the user group/organization.

BUT we cannot give them these product profile permissions as they will then be able to change the permissions of the product profile or add other virtual report suites to their product profile. => So from security point of view we cannot do this.

 

My request would be that it is also possible for a user group admin to add a new user to the group. We are connected to our company user management system via Azure ID. So actually all the users exist already.

 

Why is this feature important to you

To have a secured delegated user management process in place.

 

How would you like the feature to work

User group admins should be able to add a new user to the user group / organization that exist already in the connected user management system.

 

Current Behaviour

Only product admins can add new users from the connected user management system to the user group. But with this permission the user can do much more and assign additional permissions to the product profile. SO it is then an admin with more permissions than just permissions for the user management.

1 Comment

Avatar

Level 2

7/6/23

at banks, the separation of duties between user administration and making changes to the tool is a requirement.  Being able to have a group of admins 'only' be able to modify admins would help banks keep that separation of duties.