Delegated Admins should not be able to change User roles
deferred
J
Jocasta Williams
When someone is a Delegated (Designated) Admin, they should not have full control over Users. At present, a Delegated Admin (DA) can elevate an existing User to an DA role, as well as remove a User from their DA role. This should only be controlled by a Admin will full rights across the tenant, and it's a security issue to have this loophole in place.
Kathryn Stewart
updated the status to
deferred
A
Adrian Godoy
Completely agree! Great to see this being evaluated along with a couple other requests related to this.
G
Gina Scott
I agree with Jocasta. Also, I think I mentioned this before, but to be able to turn on/off control of items for Delegated Admin would be good. What is expected from delegated admins could change depending on situations. The ability to temporarily turn on/off features would be nice.
The status was updated to
being evaluated
Marc Jennings
updated the status to
received