Security Permissions Group settings

The built-in SunSystems Administrator group, and any groups created beneath it, have an additional Security Permissions option in the left hand pane of the Edit Group dialog.

For the built-in SunSystems Administrator group, all settings within this option are enabled and cannot be edited. For groups created beneath the built-in SunSystems Administrator group, this option allows you to specify if members of these groups can:

• Manage Users - provides the ability to add, edit, copy, delete, and restore users.
• Manage Groups - provides the ability to add, edit, copy, delete, and restore groups.
• Change Group Memberships - provides the ability to change users' group membership.
• Change Security Settings - provides access to options on Sessions, Function Extensions, Data Access Groups and Audit Policy.

Each security permission can be set to:

• Enable - the permission is enabled for this group and any group created beneath this group, except those where the permission is explicitly disabled.
• Disable - the permission is disabled for this group and any group created beneath this group.

Default and Enable settings have the same effect.

To change a user's administrator group membership, you must have permission to manage users, manage groups, change group membership, and change security settings.

To run SunSystems Security migration wizards, you must have permission to manage users, manage groups, and change group membership.