Is the User Admin (created by Tenant Admin) having the same privileges as the Tenant Admin or are there any restrictions?
No, a User Admin does not have the same privileges as a Tenant Admin (Admin). The Tenant Admin is a superuser for the entire tenant, whereas the User Admin has specific functional boundaries and restrictions.
Key Restrictions & Differences for a User Admin
- User Creation & Editing Restrictions:
- Tenant Admin: Can create and manage users assigned to any role (Admin, User Admin, Workflow Admin, Agent Admin, Activity Monitor, or User).
- User Admin: Is restricted to creating or updating users who have the User role only. They cannot create other Admins, Workflow Admins, or Agent Admins.
- Scope of Authority:
- Tenant Admin: Acts as a superuser who automatically inherits full permissions across all roles, including Workflow Administrator, User Admin, Activity Monitor, and Tenant User.
- User Admin: Focuses primarily on maintaining users with the User and User Admin roles and managing the Tenant Policy (such as password policy configurations).
- System & Asset Control:
- Tenant Admin: Has access to the entire AutomationEdge system for that tenant, including full control over workflows, agents, plugins, credentials, and purge configurations.
- User Admin: Does not have full superuser access over system workflows, agents, or tenant-wide configurations unless specifically granted object-level or category-level permissions
