Skip to main content
New Idea

User Management - Edit Users Without Super Admin Permissions

Related products:CS Rules Engine
prithvi_vihari
cameron_wright
dan_wiegert
andrew_biehle
alex_legay
+4
  • prithvi_vihari
    prithvi_vihari
  • cameron_wright
    cameron_wright
  • dan_wiegert
    dan_wiegert
  • andrew_biehle
    andrew_biehle
  • alex_legay
    alex_legay
  • darkknight
    darkknight
  • meenal_shukla
    meenal_shukla
  • spencer_engel
    spencer_engel
  • shannon
    shannon

aschreiner

I was configuring permissions for a team that will be handling our user provisioning going forward and there is currently no way to allow them to manage users without giving them super admin permissions which I do not want to do. They should have access to the manage users section only.

I tried assigning the permission bundle for navigation to the user management page but this only allows viewing and not administration. There should be a permission specifically for user permissions as there is for things like emails, surveys, etc.

4 replies

Kartheek
Forum|alt.badge.img
  • Gainsight Employee ⭐️
  • 28 replies
  • May 5, 2023

@aschreiner We see that add/modify/delete users is more of the super admin functionality and others should only have view access. In your case, why don’t the team be provided super admin access if they are the ones who handles user provisioning. Trying to understand, on why the team should not be given super admin access, can you please elaborate?


aschreiner
Forum|alt.badge.img+1
  • Author
  • Contributor ⭐️⭐️
  • 8 replies
  • May 5, 2023

@Kartheek the only function they perform in the system should be provisioning of users so giving them the super admin allows them (though we tell them not to) modify any data in the system they want. This is more of a security precaution to be able to remove the ability for subsets of users who have this permission.


andr_raposo
Forum|alt.badge.img+1
  • Contributor ⭐️⭐️⭐️⭐️
  • 37 replies
  • September 14, 2023

We are having the exact same problem. 

The team who does the user provisioning work on a principal of least privilege access and this just isn’t possible in Gainsight. It’s definitely a concern for us


kstim
Forum|alt.badge.img+6
  • Helper ⭐️⭐️
  • 240 replies
  • September 14, 2023

We have a separate team that provisions access to different systems, but it would be nice if they could also handle Gainsight provisioning via User Management without having all the powers that come with super admin access. I understand that this may be a niche request since the Gainsight admin(s) typically handles user management/provisioning anyway, but figured I’d throw in my two cents!


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings