Administrator level

The administrator level is an optional value that can be used to create an administrator account hierarchy. This hierarchy controls which other administrator accounts any given administrator user can see and interact with.

Non-administrator user accounts can be assigned an administrator level, but it will have no influence or affect.

An account’s administrator level can be found in the OneSpan Authentication Server Administration Web Interface, and is an integer value ranging between 0–255. Administrator accounts can see, edit, or delete any other account that:

• Has a level number equal to or less than their own.
• Exists within the same administrator scope.

By default, a new administrator account is created at the same administrator level as the account that created it. The only exception to this is when the system is upgraded from version 3.20 or earlier to version 3.21 or later, in which case all administrator accounts are assigned level 255, meaning that every administrator account can see and interact with every other administrator account.

If you use the Rescue Administrator function to perform an administrator account rescue, the newly recovered account will be created with an administrator level of 255 (100 on OneSpan Authentication Server Appliance).

OneSpan Authentication Server Appliance only allows and uses a value range of 0–100, and the system accounts are all set to 100 by default.

Figure: Example of an administrator level hierarchy

It is not possible for an administrator account to change its own administrator level.