Appearance

Multi Level Administration ​

ADOxx offers a concept for multi level administration. Additionally to the administrator the user category "sub-administrator" is available. The sub-administrator has access to the Development Toolkit with restricted administration rights. The multi level administration concept distinguishes between global and local user groups.

Global/local user groups ​

Global user groups Global user groups are primarily used to assign individual functions (e.g. roles in the versioning, menu items,..) to users. Global user groups are managed by an administrator. Only the assignment of users to global user groups can also be made by sub-administrators. For this, the sub-administrator is assigned to global user groups by an administrator.

Hint

The sub-administrator is normally not assigned to global user groups as a user. If a sub-administrator is nevertheless assigned to a global user group, that does not change his administration rights.

Local user groups Local user groups are used to assign user groups access rights to model groups. If the administrator is creating a sub-administrator he assigns local user groups to the sub-administrator. Now the user groups and the users assigned to this groups are visible to the sub-administrator and can be managed by sub-administrators.

Sub-Administrator - Administration Rights ​

Visible users and user groups The following users and user groups are visible for a sub-administrator:

  • Local user groups, the sub-administrator is assigned to
  • Global user groups, the administrator explicitly assigned to the sub-administrator for user management
  • Users that are assigned to his local user groups and who have the same application library assigned

Hint

Users who are just assigned to his global user groups or administrators are not visible for a sub-administrator.

Administrations rights For users and user groups that are visible to him a sub-administrator has administration rights as described below. A sub-administrator is able to:

  • create, edit and delete users assigned to his local user groups (without administration rights),
  • assign users to local and global user groups, or terminate this assignment,
  • create, edit or delete local user groups,
  • create sub model groups and
  • assign local user groups access rights to model groups.

Hint

The assignment of users to user groups can just be removed by the sub-administrator as long as at least one visible user is assigned to a user group. Otherwise the entire user group would be invisible for him.

Restrictions of administration rights: The administration rights are restricted as described below. A sub-administrator:

  • cannot create or delete sub-administrators,
  • cannot create main model groups,
  • cannot create sub model groups to groups that global user groups have access rights to and
  • can only assign access rights to model groups to which he has write access rights himself.

Sub-administrators are further subject to the general limitations.

Sub-Administrator - General Restrictions ​

Sub-administrators are subject to the general limitations. A sub-administrator:

  • has no access to the model pool,
  • can not execute import and export functions,
  • has no access to the attribute profile management,
  • has, except of the possibility to assign component access rights to user groups, no access to the component management,
  • has no access to the file management,
  • sees only the application library that is associated with him and
  • cannot change the application library but he can execute administration queries on the library.

Attention

The view of menu items, smart icons and context menus is also limited according to these restrictions.