This article explains the restrictions related to TRACC application user area and roles hierarchies, which is useful to understand if you cannot adjust or see a particular user's application role or identity when in the TRACC Client Admin Console (CLAC).
For more detailed information specific to the permitted roles for the CLAC and TRACC Platform, please refer to the respective user manual under the Support tab in the TRACC Platform.
Hierarchy Restrictions
There are two restrictions in terms of user management that apply when logged into the CLAC –
- role restrictions; and
- area restrictions
These restrictions have been put in place to prevent people with the incorrect authority from modifying the access of users in a higher role.
1. Role restrictions
Each TRACC application has it's own role hierarchy. When managing users you will not be permitted to modify or see roles that are higher than yours in the application hierarchy. For this reason we recommend that administrators are given the highest permissible role possible.
For example: if you are an 'Administrator' in the TRACC Platform, you will not be able to see the 'Super Administrator' (highest role in the Platform) option when you are administering users in the CLAC.
The screenshot below indicates a TRACC Platform Administrator's access, where you can see that the Super Administrator role is not listed under the user's (Kim) TRACC Platform options. This is because an Administrator can only manage roles and areas for the Platform that are the same as theirs, or below.
2. Area restrictions
CLAC users can only manage application users and identities for the same area that their CLAC identity belongs to. This means they can manage users and identities for everyone in their area and below.