Step 7: Empower the New Roles to Manage User Groups

1. Select Users and Groups in the main navigation pane.

   

2. In the User Groups Resource tree, select the InternalUsers group.
3. Select the Edit Delegated Admin tab from the top of the Editor pane. The Editor pane indicates that no Delegated Administration roles have been associated with this user group:

   
   

4. Select Internal from the Delegated Administration Roles drop-down list, and click Add Role.

   The Editor pane now indicates the pending association of the Internal Delegated Administration role with the InternalUsers User Group.

5. In the Capabilities area, click the check boxes under Profile Admin, Read User/Group, and Create Update Delete User/Group, and click Save.

   The Editor pane now reflects the association of the Internal Delegated Administration role with the InternalUsers User Group:

   

   The relationships between the user groups and the Internal Delegated Administration role are such that all members of the InternalAdministrators group are in the Internal Delegated Administration role. As a result, these users have the authority to manage all members of the InternalUsers user group.

6. Repeat steps 2-5, associating the External Delegated Administration role with the ExternalUsers group.