4

Is there a way we restrict users or group to manage user management without System Administrator Access.

Assume we create a help desk group and they do the following

  1. Add or Manage User
  2. Add or Manage Group
5

It is currently not possible to separate this from the System Administrator role. We introduced "System Privileges" in our 8.2 cloud release, and SDL Web 8.5 (due later this year) will include this.

Check the following links for more information:

| improve this answer | |
2

AFAIK, it is not possible to manage user management without system administrator access OOTB.

The main thing to note, in Tridion UI, user management is part of administration tab which is available to you only if you are administrator.

There is a work around that can be implemented:

  1. Create a custom application and implement functionality required like add user / group, remove user / group to the Custom application. Custom application will use one administrator account to perform those updates.
  2. Give link to this custom application in custom pages / add gui extension to add button in ribbon toolbar.
  3. To stregthen the security, in the load of custom application check the group of the user logged in and if it is part of helpdesk group then only allow them to make updates using that UI.

We have done similar implementation by using custom pages to manage override checkout of other users and override publish transactions.

| improve this answer | |
  • 1
    The administration tab does appear to non-administrators with certain rights. For example, having Permission Management and Publication Management` lets users edit Rights of other users and see the System Administrator tab. I believe they could also manage users and groups to an extent (maybe membership scope limited to Publication in that user's scope). – Alvin Reyes Sep 26 '17 at 16:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.