Administration scenario

Prev Next
Table: Administration scenario – General tab
Field nameDescription
Restrict Administration Privileges Assignment

If this checkbox is selected, administrators are permitted to assign and unassign only the privileges that are currently assigned to their own account. For example, an administrator that does not have reporting privileges cannot assign reporting privileges to others.

By default, this option is enabled. If you disable it, administrators are allowed to grant privileges they do not have. This can impose a security risk, as it allows accidental or intentional privilege escalation and bypasses the principle of least privilege. We strongly recommend to always keep this option enabled in productive environments, unless you fully understand and accept the associated security risks.