Administrator rights

[SkayyHH]

Hello,

maybe someone has a solution how to separate the technical administrator from the data access. The Appgini administrator has access to the admin but can also see all data entries of the users via the admin.

I need a separation between administration functions like creating users etc. and administration of the data sets.

Many thanks for tips

[pfrumkin]

I would say you can't prevent the AG Admin from seeing everything. You can create a SysAdmin group to do your system tasks like creating users.

~Paul

[SkayyHH]

Hi, thank you very much. But how can I give the group the right to create groups and users?

Thanks much, Kai

[onoehring]

Hi,

you could also do the opposite: Just be a regular super admin (and to all administrative tasks like adding users, defining group permissions), but add to every page in the _init function a check whether the current user is superadmin - and if, show some message/send him somewhere else.

But well: The admin always can do everything.

Olaf

[SkayyHH]

Thanks very much, Olaf !