Are Assistant Admin (AA) powers cumulative across different ActiveViews?
If Assistant Admins (AAs) are members of multiple ActiveViews, do all of their powers apply across those ActiveViews?
How does DRA manage the powers delegated to Assistant Admins (AAs) that are members of several ActiveViews?
Directory and Resource Administrator 7.x
Directory and Resource Administrator 6.x
Powers delegated to Assistant Admins (AAs) that are members of multiple ActiveViews are not cumulative across those ActiveViews, but the objects managed by those ActiveViews are cumulative.
For example, suppose you grant an AA GroupMemberAdd powers over ActiveView A that contains Domain A, and you also grant the AA GroupMemberDelete powers over ActiveView B that contains Domain B. If the AA opens the Account and Resource Management Console, the AA can see objects from both ActiveViews (Domain A and Domain B), but can only add users to groups in Domain A and can only delete users from groups in Domain B. The AA cannot delete users from groups in Domain A and cannot add users to groups in Domain B.