| Field name | Description |
|---|---|
| Restrict Administration Privileges Assignment | If this checkbox is selected, administrators are permitted to assign and unassign only the privileges that are currently assigned to their own account. For example, an administrator that does not have reporting privileges cannot assign reporting privileges to others. By default, this option is enabled. If you disable it, administrators are allowed to grant privileges they do not have. This can impose a security risk, as it allows accidental or intentional privilege escalation and bypasses the principle of least privilege. We strongly recommend to always keep this option enabled in productive environments, unless you fully understand and accept the associated security risks. |
Administration scenario
- Updated on Apr 20, 2026
- Published on Jan 14, 2026
- 1 minute(s) read
Was this article helpful?