Database Reference
In-Depth Information
Unfortunately it takes about ten clicks and a lot of reading to make a non-super-administrator user. This is the
wrong way around. It should be easier to create a low-privileged user (Figure
18-8
) and harder to create a Super
Administrator.
Figure 18-8.
It's too easy to just create new users as Super Administrators
The Super Administrator checkbox delegates all privileges on the first page. Then just hit “Review” and
“Finished,” which is very quick and simple but creates EM users with the highest possible privilege. Compare this to
the previous three pages of privileges, which are the alternatives to creating a non-super administrator. It is easy to
predict what the likely outcome of this is. Users will tend to be created as Super Administrators when that privilege is
not needed.
But is creating many EM users as super admins a bad thing? Well, yes it is. The fact is that super admins can all
lock each other out by changing each other's passwords and can demote each other to non-super administrators if
they wish, so Super Admins are not functionally secure, as demonstrated in the following scenario.
Log on as any Super Administrator and click Setup, Security, and Administrators (see Figure
18-9
).
