Chapter 4 Setting Up User Accounts 71
The following tasks are available to limited administrators:
If you give a user different administrative capabilities at several account levels, the
capabilities are merged.
For example, let’s say a user named Anne Johnson is a member of the Algebra 101
group, and the Algebra 101 group is a member of the All Classes group. You give
another user, Ravi Patel, the following administrative control:
 “Manage user passwords” rights for All Users and Groups
 “Edit managed preferences” rights for the All Classes group
 “Edit user information” rights for the Algebra 101 group
 “Edit group membership” rights for the Anne Johnson user account
Ravi Patel has all four abilities for Anne Johnson’s user account.
You can change a user’s domain privileges for LDAPv3 directory domains. You can’t
change privileges for a local user account or an account stored in a non-LDAPv3
directory domain.
To add limited administrative capabilities:
1 In Workgroup Manager, click Accounts.
2 Select the user account you want to work with.
To select an account, click the globe icon above the accounts list, choose the directory
domain where the user’s account resides, and then select the user.
3 To authenticate, click the lock and enter the name and password of a directory domain
administrator.
4 In Privileges, choose Limited from the “Administration capabilities” pop-up menu.
5 To control the level of user or group administration, click the Add (+) button and drag
users and groups from the drawer to the “User can administer” list.
6 Select a user or group from the “User can administer” list and then select the
administration capabilities you want the limited administrator to have.
To give administrative control to all users and groups, select “All Users and Groups” and
then select administrative capabilities.
7 Click Save.
Task Description
Manage user passwords Change a user’s password in the user account’s Basic pane. A
limited administrator can’t change a full administrator’s password.
Edit managed preferences Change managed preference settings.
Edit user information Edit the user account’s Info pane.
Edit group membership Edit the user account’s Groups pane or the group account’s
Members pane.