NEW2.03.01 · Released 7 August 2015

High Importance

NEWfinPOWER Connect

Released in

2.03.01

7 August 2015

1. Opened14 Jul
2. Closed14 Jul
3. Released7 Aug

Article 13125 Job J015907

Users; added new User Level "User Administrator"

Added a new User Level of "User Administrator".

WARNING: Using this new User level can open up certain security risks. Only use for trusted Users. For example, this type of User can create a new User, assign them to Roles, then login as that User and process with that Role's permissions.

• Like a Normal User, Permissions are applied to the "User Administrator" Users. Note, Permissions are not applied to full Administrators.

• Like an Administrator, "User Administrator" Users can add, update and delete Users, including Roles the User belongs to. However, they can only do this for Read-Only and Normal Users. Administrator and User Administrator Users cannot be added, updated or deleted.

• Certain User functions are available, including clearing Password History (Normal/ Read-Only users) and clearing Login Lockout (Normal/ Read-Only users).

• User Administrators can update User Preferences for any User, but cannot access Global Settings.

• Administrator Users cannot change User Groups, User Policies, Roles or Permissions. They can print "User Security Reports" from the Report Explorer.

• Task Manager; can only see subordinates, whereas an Administrator can see all Users.

Note; a warning has been added to the User form and New User wizard "User Administrators may pose a Security Risk" if the User Administrator level is selected.