
The following tasks are available to limited administrators:
Task | Description |
Manage user passwords | Change a user’s password in the user account’s Basic pane. A |
| limited administrator can’t change a full administrator’s password. |
|
|
Edit managed preferences | Change managed preference settings. |
|
|
Edit user information | Edit the user account’s Info pane. |
|
|
Edit group membership | Edit the user account’s Groups pane or the group account’s |
| Members pane. |
|
|
If you give a user different administrative capabilities at several account levels, the capabilities are merged.
For example, let’s say a user named Anne Johnson is a member of the Algebra 101 group, and the Algebra 101 group is a member of the All Classes group. You give another user, Ravi Patel, the following administrative control:
“Manage user passwords” rights for All Users and Groups
“Edit managed preferences” rights for the All Classes group
“Edit user information” rights for the Algebra 101 group
“Edit group membership” rights for the Anne Johnson user account
Ravi Patel has all four abilities for Anne Johnson’s user account.
You can change a user’s domain privileges for LDAPv3 directory domains. You can’t change privileges for a local user account or an account stored in a
To add limited administrative capabilities:
1In Workgroup Manager, click Accounts.
2Select the user account you want to work with.
To select an account, click the globe icon above the accounts list, choose the directory domain where the user’s account resides, and then select the user.
3To authenticate, click the lock and enter the name and password of a directory domain administrator.
4In Privileges, choose Limited from the “Administration capabilities”
5To control the level of user or group administration, click the Add (+) button and drag users and groups from the drawer to the “User can administer” list.
6Select a user or group from the “User can administer” list and then select the administration capabilities you want the limited administrator to have.
To give administrative control to all users and groups, select “All Users and Groups” and then select administrative capabilities.
7Click Save.
Chapter 4 Setting Up User Accounts
71