Create new administrator role. Only manage users

[dara]

Hello!!!!!

I need help about creation roles!
I want to create a new administrator role. He only can manage user and groups and manage space users(ChangePermissions). He can't  view the documents stored in Alfresco.

My Alfresco version is comunnity 2.1.0.

I hope explain well, because i don't know English very well  .

Thank you so much!!

Bye!!

[invictus9]

You can't directly create such a role in Alfresco today. Alfresco does not have a tiered or delegated security role model, such as would be found in enterprise systems.

It is possible to create an Alfresco application that can be run by a non-administrator (with permission) that will manage users and groups. It might be done as a Java-backed web script that escalated privileges for the application to manage those types of nodes, and replicated the Alfresco user interface.

Here is another method that might be more feasible for you. If you authenticate your Alfresco users against LDAP or Active Directory, and you have an identity management application to allow you to configure users and groups, then you would have solved most of your problem. Managing space users from a non-admin account might require a Java-backed web script.

[dara]

Thank you so much Invictus9, but i don't undertand very well. I think that could be possible created a new role for example Administrator2 in PermissionsDefinition.xml, with only permission ChangePermissions(this permission let to manage spaces) and something more that allow to create users and groups, but i don't find nothing to  because the user always can view the documents. Is not it possible, in this way??

Do you send me any example about that you tell me in the last post??

Other solution can be migrate Alfresco to a higher version than 2.1??

Thank you so so much

[invictus9]

My apologies if I gave the impression that I am adept with Alfresco. I am not. I have done a lot of reading and am doing configuring and exploration and some programming. I know some of the things that are possible.

I am not clear how you add permissions such that you remove permissions, if you get my meaning. All permission sets seem to be additive, so if you want to remove permissions, you need to start with very restricted permissions until you get just the ones you want.

This is the page that I have been reading to try to understand the issue:

http://wiki.alfresco.com/wiki/Security_and_Authentication