This document introduces the definition, usage limitations, and basic operations of delegated administrator accounts.
What is a delegated administrator account?
The management account of an organization can designate member accounts within the organization as delegated administrator accounts for organization service management. Once set up successfully, the delegated administrator account will receive authorization from the management account, allowing it to access the organization and member information within the corresponding Organization management and perform business management within the scope of that organization.
By using delegated administrator accounts, organization management tasks can be separated from business management tasks. The management account performs organization management tasks for the group account, while the delegated administrator account carries out business management tasks for group service management, adhering to the recommendations of security best practices.
Usage Limits
1. A delegated administrator account can only be a member account within the organization and cannot be the management account.
2. The number of delegated administrator accounts allowed to be added in group service management is defined by each group service management.
Adding a delegated administrator account
1. Log in to the Organization Console using the management account.
2. In the left sidebar, select Organization > Organization Service Management.
3. On the Group Service Management page, click Add in the Operation column of the target group service management.
4. In the account section, select a member.
5. Click OK.
Note:
After successful addition, use the delegated administrator account to access the multi-account management module of the corresponding organization service management, and you can perform management operations within the scope of the organization's group account.
Remove delegated administrator account
Note:
Removing an operation may impact the normal use of group service management; please carefully consider before proceeding with removal.
1. Log in to the Organization Console using the management account.
2. In the left sidebar, select Organization > Organization Service Management.
3. On the Group Service Management page, click the number in the Delegate Management Members column for the target group service management.
4. On the "Delegate Administrator" page, click "Remove" in the operation column of the target account.
5. In the remove warning dialog box, click Continue.
Note:
After successful removal, the account will no longer have access to the organization and member information within the group service management.