Are Assistant Admin (AA) powers cumulative across different ActiveViews? (NETIQKB50880)

goal
Are Assistant Admin (AA) powers cumulative across different ActiveViews?

goal
If Assistant Admins (AAs) are members of multiple ActiveViews, do all of their powers apply across those ActiveViews?

goal
How does DRA manage the powers delegated to Assistant Admins (AAs) that are members of several ActiveViews?

fact
Directory and Resource Administrator 7.x

fact
Directory and Resource Administrator 6.x

fix

Powers delegated to Assistant Admins (AAs) that are members of multiple ActiveViews are not cumulative across those ActiveViews, but the objects managed by those ActiveViews are cumulative.

For example, suppose you grant an AA GroupMemberAdd powers over ActiveView A that contains Domain A, and you also grant the AA GroupMemberDelete powers over ActiveView B that contains Domain B. If the AA opens the Account and Resource Management Console, the AA can see objects from both ActiveViews (Domain A and Domain B), but can only add users to groups in Domain A and can only delete users from groups in Domain B. The AA cannot delete users from groups in Domain A and cannot add users to groups in Domain B.

Formerly known as NETIQKB50880