We recently upgraded our Adobe Acrobat licenses to an Enterprise account and are trying to apply least privilege access. The minimum role needed for a help desk member to manage users is "User Group Admin", but this group still allows its members to assign this role to other members. This seems counter-intuitive to allow user managers to be able to delegate the same role to as many other people as they wish. Shouldn't assigning role membership be limited to the System Admin role?
Also, any possibility of allowing System Admins to create custom roles with granular permissions and the ability to turn off notifications for role changes?
For reference see this document: Administrative roles
2
Replies
AdChoices