Endpoint Administration Guide for Windows › Scope of Administration Authority › Sub Administration

Sub Administration

Security administrators (users with the ADMIN attribute) can grant specific administrative privileges to regular users. These regular users are then called sub administrators. Sub-administrators have privileges to manage only specified CA ControlMinder classes or objects. For example, a sub administrator can be authorized to manage only user and group objects. You can set a higher level of sub administration by authorizing the sub admin user the administrative privileges for specific objects in a class.

Sub administrators of users, groups and resources can use selang to perform administrative tasks related to these resources.