Security permissions group settings

The built-in SunSystems Administrator group, and any groups created beneath it, have an additional Security Permissions option in the left hand pane of the Edit Group dialog. For the built-in SunSystems Administrator group, all settings within this option are enabled and cannot be edited. For groups created beneath the built-in SunSystems Administrator group, this option allows you to specify if members of these groups can:

• Manage Users - provides the ability to add, edit, copy, delete, and undelete users.
• Manage Groups - provides the ability to add, edit, copy, delete, and undelete groups.
• Change Group Memberships - provides the ability to change users' group membership.
• Change Security Settings - provides access to options on the Settings menu.

Each security permission can be set to:

• Default - the permission setting for this group is inherited from the parent group and can be enabled or disabled for any group(s) created beneath this group.
• Enable - the permission is enabled for this group and any group(s) created beneath this group, except those where the permission is explicitly disabled.
• Disable - the permission is disabled for this group and any group(s) created beneath this group.

The Default and Enable settings have the same effect.

To change a user's administrator group membership, you must have permission to manage users, manage groups, change group membership, and change security settings.

To run SunSystems Security migration wizards, you must have permission to manage users, manage groups, and change group membership.