Skip to main content
New Idea

User Management - Edit Users Without Super Admin Permissions

Related products:CS Rules Engine

aschreiner

I was configuring permissions for a team that will be handling our user provisioning going forward and there is currently no way to allow them to manage users without giving them super admin permissions which I do not want to do. They should have access to the manage users section only.

I tried assigning the permission bundle for navigation to the user management page but this only allows viewing and not administration. There should be a permission specifically for user permissions as there is for things like emails, surveys, etc.

4 replies

Kartheek
Forum|alt.badge.img
  • Gainsight Employee ⭐️
  • 28 replies
  • May 5, 2023

@aschreiner We see that add/modify/delete users is more of the super admin functionality and others should only have view access. In your case, why don’t the team be provided super admin access if they are the ones who handles user provisioning. Trying to understand, on why the team should not be given super admin access, can you please elaborate?


aschreiner
Forum|alt.badge.img+1
  • Author
  • Contributor ⭐️⭐️
  • 8 replies
  • May 5, 2023

@Kartheek the only function they perform in the system should be provisioning of users so giving them the super admin allows them (though we tell them not to) modify any data in the system they want. This is more of a security precaution to be able to remove the ability for subsets of users who have this permission.


andr_raposo
Forum|alt.badge.img+1
  • Contributor ⭐️⭐️⭐️⭐️
  • 37 replies
  • September 14, 2023

We are having the exact same problem. 

The team who does the user provisioning work on a principal of least privilege access and this just isn’t possible in Gainsight. It’s definitely a concern for us


kstim
Forum|alt.badge.img+6
  • Helper ⭐️⭐️
  • 240 replies
  • September 14, 2023

We have a separate team that provisions access to different systems, but it would be nice if they could also handle Gainsight provisioning via User Management without having all the powers that come with super admin access. I understand that this may be a niche request since the Gainsight admin(s) typically handles user management/provisioning anyway, but figured I’d throw in my two cents!


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings