Creating a Subadministrator security role

Administrators and members of the Administrators group, can use Developer Studio to view every AR System server object and can modify any object that is not reserved by another user. You can use Subadministrator Permissions to grant administrator access to a subset of existing forms, local applications, and workflow to subadministrators and members of the Sub Administrator group. A subadministrator with administrator access to a server object can use Developer Studio to view and modify it in the same way as an administrator. A subadministrator can also create objects.


Related topics

Creating-and-mapping-roles

Creating-an-Administrator-security-role

Subadministrators can perform the following functions:

  • Log on to Developer Studio
    When you log on as a Subadministrator, the server icon in Encryption Security Navigator has a yellow badge with a letter S instead of a green badge with a letter A.
  • Create local applications, forms, and packing lists.
    When you create an object as a subadministrator, set the Subadministrator Permissions so that you can access the object.
  • Modify local applications, forms, and packing lists to which they have administrator access.
  • Create and modify filters, active links, and escalations associated with forms to which they have administrator access.
  • Create and modify active link guides, filter guides, images, and menus.

Subadministrators cannot perform the following functions:

  • Modify local applications, forms, and packing lists to which they have no administrator access.
  • View or modify forms to which they do not have subadministrator access in local application or packing lists to which they do have administrator access.
    If a user has subadministrator access to a local application or a packing list, but not to a form in the local application or packing list, the form is not listed in the object list or editor.
  • Create or access deployable applications.
  • View or modify roles, distributed mappings, or distributed pools.
  • Change server information settings.
  • Release licenses of users currently accessing Encryption Security.

The following figure is an example of using Subadministrator Permission to enable users to maintain objects on an AR System server:

221_subadministrators.png

After you grant a group subadministrator permissions for an application, the members of that group can modify the application's appearance, group permissions, help text, and change history. Subadministrators can also change which forms are included in an application object, although they cannot alter the forms themselves unless they have administrator access to them. 

To provide all members of the Subadministrator group administrator access to an object, grant the Public group Subadministrator permission.

To divide administrator access between groups, create a group for each collection of objects, for example, Engineering Subadministrators and Sales Subadministrators.

To provide subadministrators access to an AR System server that has object reservation enforced, you must grant them access to a form on the server. See Version-control-in-AR-System.


To create a subadminstrator

  1. In the Mid Tier, open the User form of the appropriate server in Search mode.
  2. Perform a search to find the user you want to grant administrator access to.
  3. Confirm that a member of the Sub Administrator group has a fixed license and make the following changes:
    • From the Group list menu, select Sub Administrator.
      The list must include the Sub Administrator group to grant the user the potential to be a subadministrator.
    • From the License Type option list, select Fixed.
      You must assign subadministrators a Fixed Write license.
  4. Save your changes.
  5. Grant subadministrator permission for the form to a group or role to which the subadministrator belongs. See To assign subadministrator permissions to forms, local applications, and packing lists. 


To assign subadministrator permissions to forms, local applications, and packing lists

When assigning permissions for an application, you must assign the same permissions as are assigned for the individual forms in the application.

  1. In Developer Studio, open the appropriate form, local application, or packing list for modification.
  2. Access the Subadministrator Permissions:
    • For a form, select the Definitions tab. In the Permissions panel, expand the Subadministrator Permissions sub-panel.
    • For a local application or a packing list, on the Properties tab, click the Permissions > Subadministrator Permissions property and then click the ellipses button.
  3. On the Subadministrator Permissions page or dialog box, use the arrow buttons to move the appropriate groups into the Permissions list.
    The members of the group or role have the same privileges and permissions that an administrator has for that object.


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*