Identity Manager administrators are users with extended Identity Manager privileges.
Identity Manager administrators manage:
System objects, such as roles and resources
Unlike users, administrators in Identity Manager are assigned capabilities and controlled organizations, which are defined as follows:
Capabilities. A set of permissions granting access rights to Identity Manager users, organizations, roles, and resources.
Controlled organizations. Once assigned to control an organization, the administrator can manage the objects in that organization, as well as any organizations that are descended from it in the hierarchy.