This article explains the restrictions related to the TRACC Platform user area and roles hierarchies, which is useful to understand if you cannot adjust or see a particular user's role when on the People Page in the Admin Console.
Hierarchy Restrictions
There are two restrictions in terms of user management that apply when working in the Admin Console.
- role restrictions; and
- area restrictions
These restrictions have been put in place to prevent people with the incorrect authority from modifying the access of users in a higher role.
You can access the Admin Console, by clicking on the Admin option in the main menu.
Role Restrictions
The TRACC Platform has a role hierarchy. When managing users, you will not be permitted to modify or see roles that are higher than yours in the hierarchy. For this reason we recommend that administrators are given the highest permissible role possible.
For example: if you are an 'Administrator' in the TRACC Platform, you will not be able to see the 'Super Administrator' (highest role in the Platform) option when you are administering users on the People Page.
A user can only manage roles and areas for the Platform that are the same as theirs, or below.
Area Restrictions
Admin Console users can only manage Platform users and provide area roles for the same area that their account belongs to.
Your area path will be illuminated in the area tree, whilst restricted areas will be greyed out. Any parent areas, of your area will also be disabled. This means that you can only manage users in your area and its child areas.
Note: in order to manage users outside of your area/s. You will need an additional area role to manage users within a specific area or be granted access to a higher area within the organization's area tree.
When trying to manage areas for users outside of your areas, you will receive the below error message.
Understanding these restrictions and hierarchies on the TRACC Platform's user area and roles is essential for effective user management and ensures that you can only view or modify roles within your authorized scope on the People Page, in the TRACC Admin Console.