Working as a Tenant User Administrator 

If you are a tenant user administrator, the following applies:

·        You must be logged on as a tenant user (see Logging on as a Tenant User).

·        You can only work with users, groups, and roles that belong to the same tenant as you (in other words, users, groups, and roles that have the same tenant prefix).

If you are assigned to the standard Delegated User Administration role, by default you do not have the required authorizations to manage groups and roles. For more information, see Creating Tenant User Administrators.

·        You do not enter the tenant name as the prefix when searching for, creating, or modifying objects.

The only exception is creating portal roles in the Role Editor. When you create portal roles, you must always define the tenant name in lower-case letters as the role ID prefix.

·        When you perform searches using the User Management console, the search results are automatically filtered to display only users, groups, or roles from your tenant.

·        When you search for roles using the Role Editor in the Portal Content Studio, the search results are also filtered according to your portal permissions.

·        When you create users, groups, or UME roles, they are automatically created in your tenant. You cannot create global users, groups, or roles.

·        You can only assign portal roles for which you have the role assigner permission and which belong to your tenant. For information on role assignment, see Role Assignment in a Multitenant Portal.