Question

What Object Access rights do I need to create a User object?

5

I have set up a SystemAdmin userrole, and need this role to be able to create users. What Object Access rights do I have to give it? I've given it Create & Delete access (as well as Read & Update) on the User Object in System.Security.ObjectAccess, but I still get an error when I try to create users. What else do I need? Thanks.

asked 2009-10-13

Andrew Whiteley

2 answers

4

Hi Andrew,

You can go to 'User roles' in the project explorer. Double click on a user role and add roles to the "May grant roles".

Good luck!

answered 2009-10-13

Fedor Klinkenberg

Johan den Haan · Accepted Answer · 2009-10-13

You can go to 'User roles' in the project explorer. Double click on a user role and add roles to the "May grant roles".

You can only create users having a subset of roles of the 'may grant roles' set of the current user.

We do this so you can not create users with more rights than the current user (unless you explicitly define that with the 'may grant all roles'), to prevent security leaks.