反馈已提交
网络繁忙
Decision-making platform supports adding multiple sub-admins to help the super admin manage the system and users.
Sub-admin is also a user. A user can become a sub-admin of some functions or departments, if assigned permissions by the admin.
This article introduces how to set Jenny, Maintenance Engineer of Development Department, as a sub-admin to help the admin with system management.
Assign the using permission for System Setting and Intelligent O&M to Development Department > Maintenance Engineer so that Jenny can configure the authorized settings under System Management.
Log into FineBI as admin, choose System Management > Permission Management, click to go to Global Setting, enable Hierarchical Authorization, and click Save.
Log into FineBI as admin, choose System Management > Permission Management > General Permission Configuration, and choose permission carriers Dept., Role or users.
Take Maintenance Engineer in Development Department as an example. Click System Management and assign the using permissions of System Setting and Intelligent O&M to Maintenance Engineer of Development Department.
Maintenance Engineer Jenny (Jenny, 1) of Development Department logs into FineBI, clicks System Management to configure System Setting and Intelligent O&M.
Permissions for using System Management needs to pair with other permissions.
For system security, even if the sub-admin has the using permission for System Management, some functions are not supported.
When editing or adding directories, the sub-admin can filter dashboards of the current user and dashboards of the users with themanagement permission.
When managing the existing directories, the sub-admin can manage directories with editing permission.
Therefore, the using permission for Directory Management in System Management needs to pair with editing permissions for Directory and management permissions for Personnel Management.
Otherwise, there may be no directory you can manage in Directory Management or no dashboard you can add to directories.
For details, see Editing Permission of Directory.
The sub-admin can manage:
User: 1. Users of the departments with permissions. 2. Users of the roles with permissions. 3. Users added by the sub-admin and have not been moved to departments or roles out of permissions.
Department: Departments with permissions and the sub-departments and positions of the departments.
Role: 1. Roles with permissions. 2. Roles added by the sub-admin whose permissions have not canceled by the super admin.
Therefore, the using permission for Directory Management in System Management needs to pair with management permissions for Personnel Management. Otherwise, there may be no user, department, or role that the sub-admin can manage.
The sub-admin cannot configure Global Setting in User Management.
The sub-admin cannot synchronize users.
The sub-admin cannot delete synchronized users.
The sub-admin cannot delete himself or herself.
The sub-admin cannot operate any position of synchronized departments.
The sub-admin cannot operate any synchronized role.
The sub-admin cannot enable or disable User Restriction in User Types.
For details, see Management Permission of Personnel Management.
In Permission Management, the sub-admin can configure permission carriers: users, departments, and roles with permissions in Personnel Management.
In Permission Management, the sub-admin can configure authorized permission configuration items.
Therefore, the using permission for Permission Management in System Management needs to pair with authorization permissions in Personnel Management and other authorization permissions for other permission entities.
The sub-admin cannot configure Global Setting in Permission Management.
The sub-admin cannot configure the field of login username when configuring data permissions.
For details, see Task Schedule Authorization.
When receiving applications for publication, the sub-admin can only receive applications from users, departments, and roles withmanagement permissions.
When publishing dashboards, the sub-admin can only ang outmountthem to directories withediting permission.
Therefore, in dashboard publication, the using permission for Publication Management in System Management needs to pair with editing permissions for Directory and management permissions for Personnel Management.
When publishing data, the sub-admin can only mount them to folders with management permissions.
Therefore, in data publication, the using permission for Publication Management in System Management needs to pair with management permissions for Data Authorization and management permissions for Personnel Management.
The sub-admin cannot check public data, and can only manage the checking results from the super-admin.
When managing data tables, the sub-admin can only perform Cancel Publishing, Stop Updating, and Delete.
The sub-admin can only search data tables within the sub-admin's management permission.
For details, see section "Example".
When choosing Appearance Configuration > Directory Style > Icon & Cover, the sub-admin can only configure icons and covers for the directories within the sub-admin's editing permission.
Therefore, the using permission for System Management > Appearance Configuration needs to pair with the editing permission for Directory.
If the permission for System Setting in System Management is enabled, the sub-admin can have all permissions for System Setting.
The sub-admin can manage all scheduled tasks or assigned scheduled tasks.
When managing user groups in Task Schedule, the sub-admin can configure users, departments, and roles with personnel management permission.
When configuring templates for the dispatcher object, the sub-admin can configure templates belonging to users, departments and roles with personnel management permission.
Therefore, the using permission for Task Schedule in System Management needs to pair with permissions for managing Task Schedule and Personnel Management.
The sub-admin cannot configure Global Setting in Task Schedule.
When configuring Mobile Platform > Directory > Directory Icon, the sub-admin can only configure for directories withediting permission.
Therefore, the using permission for Mobile Platform in System Management needs to pair with the editing permission for Directory.
If the permission for Registration Management in System Management is enabled, the sub-admin can have permissions for using Registration Management.
The sub-admin cannot configure Global Setting in Registration Management.
If the permission for Intelligent O&M in System Management is enabled, the sub-admin can have permissions for using Intelligent O&M.
The sub-admin cannot configure Global Setting in Cluster Configuration, Backup and Restore, and Platform Log.
The sub-admin cannot configure Downtime Handling.
The sub-admin can only edit or delete data connections with management permission.
To edit or delete a dataset, the sub-admin needs using permissions for the dataset and the data connection called by the dataset.
Therefore, the using permission for Data Connection in System Management needs to pair with using and management permissions for Data Connection.
For details, see Management Permission of Data Connection.
If the using permission for Plugin Management in System Management is enabled, the sub-admin can have all permissions for using Plugin Management.
If the using permission for Security Management in System Management is enabled, the sub-admin can have all permissions for using Security Management.
If Role Permission Authentication is enabled, the sub-admin can configure template authentication for permission carriers including users, departments, and roles with personnel management permissions.
If Role Permission Authentication is enabled, the sub-admin can configure template authentication for dashboards belonging to users, departments, and roles with personnel management permissions.
Therefore, the using permission for Template Authentication in System Management needs to pair with management permissions for Personnel Management.
The sub-admin cannot configure Global Setting in Template Authentication.
If the using permission for Map Configuration in System Management is enabled, the sub-admin can have all permissions for using Map Configuration.
The sub-admin cannot configure Resource Handover.
If the using permission for Extracted Data Cache in System Management is enabled, the sub-admin can have all using permissions for Extracted Data Cache.
feedback
鼠标选中内容，快速反馈问题
鼠标选中存在疑惑的内容，即可快速反馈问题，我们将会跟进处理。
不再提示
10s后关闭