"Junior" admin role for user management (resetting passwords)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-11-2023 11:56 AM
Sometime around San Diego they added this 'reset password' button, which generates a random password that you can provide to user and then they can select their own password. It appears this button only is available for 'admin'. In the past we were able to assign 'user_admin' to people and they could help with password resets.
I do not see the logic of giving some T1 support guy administrative rights to all of Prod just so they can reset passwords. Seems that 'user_admin' was created for this, but they forgot about it when upgrading the password functionality.
Anyone else run into this and have any best practice for giving 'user_admin' or some role access to password resets, but not other admin functionality.
I changed the security on the 'set password' ui action to allow user_admin, but the pop up still shows issues with security. I think I probably need to modify something in the widget, but I wanted to make sure I wasn't missing another option. This seems like an obvious need and I wouldn't have expected to do any customization to meet that need (maybe configuration).
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-11-2023 12:04 PM
Both are overkill.
Role: password_reset_service_desk
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-11-2023 12:20 PM
That actually seems a bit overkill. We just need our trainers to be able to change/reset/unlock passwords for trainee accounts during class. Your link seems to require some type of verification process with the user to be setup. And for them to be enrolled etc. I'll poke at it a bit, but it still seems a bit more convoluted than I expected.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-11-2023 12:42 PM
Then you definitely don't want to get them user_admin, which can administer users, groups, locations, and companies.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-11-2023 01:02 PM - edited 08-11-2023 01:05 PM
We're totally fine with that in the Train environment. That's what they had before and they could reset password until this new stuff came out. They manage their class attendees anyway. I'll figure something out. Thanks for pointing me to that module I'm sure I can rig it to work the way we want it.
