We have been rolling out Razuna to our customers and we’d like to give some colleges in our Sales team the ability to create new users and add these users to groups.
However when we have given these sales colleges the ability to see users and groups in access control they are able to create users but the group tab just shows what groups the user is in, rather than giving the ability to add them to the groups like the admin can.
When they click on the groups tab they are able to add accounts to all the groups including the admin group which is somthing we’d like to avoid.
is there anyway to delegate the creation of new users and group management without risking them getting full admin access?
From Razuna , the Users and Groups management was set to classify the permission for Admin group and other user groups. Only Users in Admin group can be create user accounts and set the user accounts to groups. Therefore , there is no user can be add users to groups except users in Admin group.
I might of discovered a bug then but if you give any user access to the groups tab in access control, that user can then add themselves to the admin group.
I tried to give an user access to the groups tab in access control by admin account , after that I switched to this user account for login to Razuna and go to Administration to test , this user just see the group name which this account belong to and could not add it selves to admin group or this user is able to create new group names only.
In addition to the answers here, if you need to test different access to Razuna with different users please use two different browsers or else always clear cache and cookies.
i’ve just tested this again i created a group which is setup in access control to allow access to Users and Groups tab in the administration menu, the group was called “user create”
i then created a new user and made them a member of this user create group.
i then used a different browser and logged in as this user new user
In the administrator menu i was only able to see Users and Groups tab, i clicked on the groups tab and i could see all the groups i had created, including the administrator group.
i clicked on the administrator group and added the newly created test user too it.
i clicked on the administrator menu again to refresh the page and i had full admin rights.
is there any solution for this because at the moment i do need to delegate the creation of new users out but i can’t do it if they are able to give anyone full admin rights (including themselves).