Maintain an Administrative Role

About administrative roles

An administrative role is one that can add new users, add new roles, add permissions to roles, and perform other administrative tasks in the web application and in relevant parts of the designer applications. All user management functions can be done in the application.

Only administrators can assign administrative permissions to administrative roles.

Administrative permissions control what actions administrator roles can and can't do on administrative objects in the system. These actions are:

System objects include such things as:

• business process records (for example person or incident record)
• data on a single page of a record
• fields and field values
• business areas and business processes
• workflows, sections, and nested processes
• reports and graphs
• validations and actions
• users, roles, and user-role assignments
• permissions and permission-role assignments
• system functions

• Read (view)
• Add
• Update (edit or modify)
• Delete

Administrative objects are:

• User
• User-Role assignment (where users are assigned to roles)
• Role
• Role-Role assignment (where a role is assigned another role's settings; used in role hierarchies)
• Role-Permission assignment (where permissions are assigned to roles; permissions are never assigned to users, only to roles)