delegate admin rights by directory in crowd

spearmint_man

Our DataCentre is used like a SaaS, as such numerous teams interact with it, but each team is independant of the other. I had hoped a crowd directory could be administered by admins within that directory? Currently assigning admin privileges allows an admin to view all directories + all other config stuff. Can you give admin privileges only to the extent that they can add/delete users etc via crowd, but none of the other admin features? Can you suggest a way forward, otherwise admins for a team who would manage users etc could .........kill crowd accidentally.

Ive read that you can dellegate admin group privillages.

Should we sepeate users in a project by the use of directories, or should all departments using our SaaS DataCentre offering be in one directory but seperated by groups?

Daniel Wong_zylx8x

Hi there,

I definitely agree that granting admin rights to users who don't need/have sufficient knowledge can be dangerous.

Crowd Data Center has a feature called Group-level administration. This feature allows you to grant certain users/groups admin rights to other specific groups. This should be sufficient for you to give to certain admins to manage groups for their teams. You can read more about Group-level administration here - https://confluence.atlassian.com/crowd/group-level-administration-958762255.html

In terms of whether to split departments by directory or groups, it depends on your setup and where your users are coming from. I would suggest keeping things simple by sticking to just 1 directory if possible and utilising separate groups for different departments.