Question: I want to give one user the ability to add, modify, copy, and delete user accounts, but I do not want that user to have full access to grant all system privileges.
A: In the event that you wish to set up a user account for a designated system administrator, manager, or operator so that that user can be responsible for adding, copying, modifying, and deleting user accounts, you can grant the Manager privilege.
Granting the Manager privilege enables the user to view and grant all system privileges, including some you may not wish any application users to have, such as Configure, or Tag Modify.
The Security Manager's Administrative Settings dialog features a privilege suppression functionality that enables you to hide certain privileges from all security dialogs, so that users cannot access them.
In the instructions that follow, we will suppress both the Configure and Administrator privileges so that the user cannot inadvertently grant these privileges to operators.
1. Logon to your user account (which, as the VTS developer's account should and must have all system privileges granted to it).
2. Click the Options button. The Administrative Settings dialog opens.
3. Select Configure in the System Privilege Suppression list.
4. Click the Suppress button.
5. Select Administrator in the System Privilege Suppression list.
6. Click the Suppress button.
7. Click the OK button. The Configure and Administrator privileges have been suppressed. They will not appear in any dialogs except for the Administrative Settings dialog. Only your user account will have access to the Administrator privilege and the Administrative Settings dialog.
Further information on suppression of system privileges can be found in Suppress System Privileges Using the Administrative Settings Dialog.