Need a way to allow someone to manage security without being a full workspace admin. It would be great if there were different levels of admin rights. Current set-up does not allow for proper segmentation of duties and could give people more access than they should have or know how to properly use.
We will implement this segregation as part of our Centralized Identity Management initiative, which introduces a new role called the User Security Administrator role. Only users with this role can create/update/delete/de-activate users and assign them to/from workspaces. Once this feature is available, Workspace Administrators will no longer be able to create/delete/add/remove users into their models/workspaces. They will only be able to assign them model level security. The users will appear in READ mode to the WSA. Only User Administrators can remove these users from a workspace.
