Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

About "Delegate Admin" in Ranger

avatar
Master Guru

About "Delegate admin" Ranger user guide says: When a policy is assigned to a user or a group of users those users become the delegated admin.The delegated admin can update, delete the policies. It can also create child policies based on the original policy (base policy). What exactly can be done? I'm assuming the delegated admin can only further reduce given permissions. Do we have any examples updating the policy and creating child policies.

1 ACCEPTED SOLUTION

avatar
Master Mentor
hide-solution

This problem has been solved!

Want to get a detailed solution you have to login/registered on the community

Register/Login
8 REPLIES 8

avatar
Master Mentor
hide-solution

This problem has been solved!

Want to get a detailed solution you have to login/registered on the community

Register/Login

avatar
Master Mentor

@Predrag Minovic It can do whatever the permissions you give to do. demouser can login and delegate other users

admin

2234-screen-shot-2016-02-17-at-110655-pm.png

demouser

2236-screen-shot-2016-02-17-at-110635-pm.png

avatar
Master Guru

Thanks @Neeraj Sabharwal, that's cool! And per specs. What else can the demouser do as the delegated admin, can he add more paths? And how about child policies, can you try to create one? Tnx.

avatar
Master Mentor

@Predrag Minovic

demouser cannot add new policy for new paths but can add more paths under the main path.

avatar
Master Mentor

@Predrag Minovic Help me to close the thread by accepting the best answer if answer was helpful.

avatar
Expert Contributor

@neeraj sabharwal

am not able to access demo video 😞

avatar
Master Guru

There is no video, it's an animated gif, located here http://i.giphy.com/l4Ki1Ng3uxdTnUTra.gif

avatar
New Contributor

Hello, From what version of Ranger this delegate admin feature is supported? This is a cool feature for multi-level provisioning powers