Previous Topic: Approach to Configuring Touchpoint SecurityNext Topic: About the Domain Hierarchy, Orchestrators, and Agents


Maintain the Domain Hierarchy

By default, all administrators assigned to the PAMAdmins group have the Domain_Admin permissions. If you use custom policies and groups, you can restrict the Domain_Admin permissions to selected administrators.

Tasks that only a user with Domain_Admin permissions can perform are those actions that require locking the Domain. See Lock and Unlock the Domain.

These tasks change the Domain Hierarchy by renaming a node or by adding or removing nodes.

Domain menu options include Add Environment, Bulk Agent Removal, Bulk Touchpoint Removal, and Rename.