Endpoint Protection

Hi All,

We have central SEPM server and we have around 30 locations. For each location we have created one group in Central SEPM server.

We will give rights to that group with limited administrator (AD Authentication).

The issue is the respective user having full responsibility of their group. But they are not able view ADD ADMINISTRATOR.

How can I fix the issue.

Hello,

Limited Administrator does have rights to Add Administrator.

Check these Articles :

About administrators

Managing domains and administrator accounts

Adding an administrator account

Configuring the access rights for a limited administrator

Hope that helps!!!

Hi Vijay,

Administrators who fully authorized to manage a site can modify the site rights of other administrators and limited administrators, though they cannot modify the site rights for themselves. System administrators must modify site privileges for administrators who are fully authorized to manage a site.

Limited administrators cannot change the site rights of administrators. Limited administrators can change the site rights of other limited administrators with equal or less restrictive site privileges.

Check below articles,

Configuring the access rights for a limited administrator:

http://www.symantec.com/docs/HOWTO55037

About access rights:

http://www.symantec.com/docs/HOWTO55041

Adding an administrator account:

http://www.symantec.com/docs/HOWTO55403

By default, limited administrators do not have any access rights. You must explicitly configure reporting rights, group rights, command rights, site rights, installation package rights, and policy rights for this type of administrator.

This is by design. a limited admin cannot add a new administrator.